Can you explain why this check is used? Why is a read-only session not able to get any of the effective policies?