security: In CertificateCache, need to add method reset().
security (minor documentation): In PolicyManager.checkVerificationPolicy, the callbacks use parameter 'dataOrInterest', not 'data'.