A policy that runs nothing, for a viewer that has not been told to trust the file.
Scripts never run.
For a document that legitimately runs for minutes, such as a program embedded in a page.