page: declare minimal security policy header