Usage of request header presence or existence in policy evaluation