fixed policy issues for temporary credentials