writing queries for retrieving policies for anon users (including those identified by IP4 address range)