Added xml signing and verifying via keystore, with added policy options to make this work