doc improvements [ci skip]
readme update to reflect new certificate_policies behaviors [ci skip]