SAP policy
Execute sap in the caller domain.
Domain allowed access.
Execute sap in sap unconfined domain.
Domain allowed to transition.