use sub-directives to register identity policy.