return nil when policy scope not found