Preliminary work before manifest `csp` member implementation

This patch re-organizes the existing WARP and CSP code
so that it is accessible not only for Tizen and encapsulated
within SecurityPolicy classes family.
comment? CSP policy takes precedence over WARP