get policy key from domain