How to set up DGM as a policy exception for Endpoint