[POLICY] add env passwords to api/pap/xacml/dist