In case delay is more than 30 seconds in initial policy update during provisioning user is prompted for password even KCD should handle authentication in background

More...