. . "Beginning at step 800, a user creates policy to allow an application X to connect to a network, for example only when the user runs the application." . .