Structure that specifies policy for security questions. It actually contains text for the
questions (or rather a reference to localization catalog file). But it also contains a policy
how the questions can be used, e.g. how many questions to display to a user.