Might be a silly question, but why don't you rely on the ```getAuthenticationSatisfiedByPolicy``` method here ?