Support conditions

[dnmfarrell]

Policies can have conditions which are runtime predicates that limit the policy's application. Conditions are evaluated using the request context, so we will need to support the supply of a request context (key-value pairs, sort of like env).