Bonus fix adds LDAP policy variable and clarifies the usage of policy variables for temporary credentials. fixes #10197