when erp5_authentication_policy is installed, a cached method is used,
when it's not installed we just return False. We don't need to wrap this
in another level of cache.