Creating data loss prevention policies