Move verification steps from Keychain to PolicyManager, move CacheCertificate from Keychain to PolicyManager