allow only alphanumeric characters in policy numbers