OPENAM-3969 (CR-4679) enabled privilege authz on the new CREST endpoints, namely PolicyResource in this bug