security: In the KeyChain constructor, if policyManager is omitted, use NoVerifyPolicyManager.