I have an entity that is no account object and has a password as attribute.
Of course I can implement this check myself, but I prefer to retrieve the policy runtime. So that if ever I decide to change the policy, no change in the modeler is required.