Remove include of policy based access checks by default

As per the access controls documentation the Policy based enforcement should be disabled by default.