policy allow duotone thin icon