fix(policy): gate uninspected credentialed endpoints (#2493)