[POLICY] Add optional disable prometheus ep auth