[POLICY] Remove hardcoded credentials from policy-distribution