This adds the vulnerability management policy type to the security
policies JSON schema. It also adds a concern to limit the amount of
policies of this type to 5.