security (minor): In ConfigPolicyManager::lookupCertificate, rename variable to iCertUri to distinguish from the inner-scope certUri.