[Foundation-l] new checkuser policy