kdbus: check policy first, only then open kdbus