The policy engine will need a registry of policies/services/applications so it can lookup a policy chain given an api key. The policy registry will be pluggable. One of the impl types should use an infinispan cache to store its information. This allows a range of useful configurations, including persistence and clustering.