moving the parser out of the policy impl, and moving the responsibilities of component policy management to a new ComponentPolicy hierarchy, with the aim to encapsulate the logic.  Specific security marking builders are introduced to remove the potentially confusing API.