fix: add authz.client.policy to feature