security (minor): In SelfVerifyPolicyManager, don't need to import Sha256WithRsaSignature, etc.