quoting https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_Null:
> Use a Null condition operator to check if a condition key is absent at the time of authorization. In the policy statement, use either true (the key doesn't exist — it is null) or false (the key exists and its value is not null).
previously, this check acted as if it was always given a value of
"true". instead, convert this decision to a "true"/"false" string
and use `typed_any()` to match that against the parsed `vals`
`runtime_vals` are ignored here because the same document says:
> You can not use a policy variable with the Null condition operator.