policy: fix incurrect handling of scan-requests with disabled timeout