1. A method comprising: receiving, at a policy server, a rule; generating a policy based, at least partially, upon the rule; receiving a further rule from a third party device; determining if third party rule submissions are enabled; and in response to determining that the third party rule submissions are enabled, validating the further rule, and updating the policy based, at least partially, upon the further rule.