add optional param 'expires' to GetPolicy