Remove hardcoded values
Test complex restriction parsing
Pass request transparently if no policies are set up
Apply credentials parser as fortune hook