refactor: check validity of access policies in core

[zeschg]

Currently the access policies are checked in the provider. Basic checks could be done in the core, e.g. physical presence not allowed for personalities and basic/initial not allowed for device states.