some cleanup to policy evaluation
bootstrapinterceptor doing authority relative