SecurityGroupPolicy: "unknown_policy" | "accept" | "drop"