Support for module operation level policy is needed.

When policy (e.g security policy) is defined in module level operation, it is not used. We should be able to give policy at module operation level