security (minor): In SelfVerifyPolicyManager, don't need to include Sha256WithRsaSignature, etc.