return nil, time.Time{}, err
		}
		policy, _ = c.iamGroupPolicyMap.Load(name)
		return policy.toSlice(), policy.UpdatedAt, nil
	}

	// When looking for a user's policies, we also check if the user
	// and the groups they are member of are enabled.
	u, ok := c.iamUsersMap[name]
	if ok {
		if !u.Credentials.IsValid() {
			return nil, time.Time{}, nil
		}