Use policy to control ProxySG administrator access