Formulating a wireless LAN security policy