Get policy selectors

Returns all policy selectors and the set of security identities that each selector currently matches, useful for debugging policy enforcement.