which two can be used to create and apply an export policy