Policy-compliant ordinary shell
