How to use policy to prevent/block downloading of certain file types