Default to highest supported.

Really only needed when testing, this is set during real client request.
Fix incorrect policy key, that caused the loss of the encryption policy.
Return values for these policies as well.
Versions are inclusive, need >= here, not just ==.
CHANGES