security: In PolicyManager, added verifySignature.
security: In SelfVerifyPolicyManager.verify, use PolicyManager.verifySignature to be algorithm-independent.