policy for IMAP signatures