How Not To Chatgpt Your Api Security Policy