- Add security policy and annotations plumbing on the hcsshim side - Add security policy package - Pass through the security policy and test with an allow all policy