add username_policy "@append domain"