When can we have the possibility to extend the policies in APIMAN like BASIC AUTHENTICATION with our needs? It is something necessary I guess. Like in my case I just needed it to use a new identity source but I had to rewrite the doApply function because it called a private function which is validateCrendentials who only let you use the 3 identity source defined by you. I guess it will be interessting to let this function public so I can override it or expand it.
What do you think?