New policy will require agencies to convince the Justice Department that disclosure would cause significant harm.