Move kdc_get_policy helper in the lsa server where it belongs.