I've created the necessary policy, but there appears to be no way to add it to the task/service