security (internal): In ConfigPolicyManager, make the private method _extractSignature static.