Expand security policy with response expectations and scope (#21901)