Access Denied when adding claims to RPT token

Extending the server
1

My Spring Boot Application with policy enforcer works fine. But when I add via my SPI some claims to the RPT token then I am always getting: Policy enforcement result for path [http://localhost:8989/customers/1] is : DENIED

In my application.properties I have these 3 lines:
keycloak.securityConstraints[0].authRoles[0]=*
keycloak.securityConstraints[0].securityCollections[0].patterns[0]=/*
keycloak.policy-enforcer-config.enforcement-mode=enforcing

Do I need to add another setting?