policy-deny: Remove SMACK support