KeyLocator: Added getFromSignature.
security (internal): In SelfVerifyPolicyManager, added _getPublicKeyDer and use in _verify.