policy/engine changes to support PE https