fix the wrong index issue in AuthProxy operator

details:
the caller want to scan both hw_enforced and sw_enforced list, however
the original check of the pos index has issue which will lost the sw_enforced.

Change-Id: I6e7abc1d0c6d20d7cad3b40aa73b18d2610f577b