Shift Happens: Eliminating the Risks of Network Security Policy Changes