security: In ConfigPolicyManager, use KeyLocator::getFromSignature and PpolicyManager::verifySignature to be algorithm-independent.