OpenAM: policy agent SOAP proxy