Modifying Policy APIs for Keystone