# Access Policy builder search and Credential Provider value checks

The **Select Existing** tab in the Access Policy builder now searches and pages through all the entities you can access. Lists of more than 100 Client Workloads, Server Workloads, Trust Providers, Credential Providers, or Access Conditions no longer hide entries past the first page.

Credential Provider fields that take a **Literal** or **Dynamic** value now check the value against its type. Aembit rejects a save, including one through the API or Terraform, when a **Literal** value contains a `${...}` expression or a **Dynamic** value contains no valid `${...}` expression. In the Aembit Tenant UI, entering a `${...}` expression in a field switches it to **Dynamic**. See [Dynamic claims](/user-guide/access-policies/credential-providers/advanced-options/dynamic-claims/).