default security policies for Gatekeeper

With ref to #94 (comment 8202243), let's track and decide on the default Gatekeeper policies here.