The policy puts journalists at risk of being branded security threats if they request classified or certain unclassified information.