XACML: Configuration should allow specifying just the locators (and no policies)

There can be use cases where the policies may be stored at locations only the locators will know, in which the policies/policySets do not make any sense. It is important to just allow the Locators in the config file.