keystone.common.policies.credential module