Config now has sign, fetch and remove policies

Only sign policy is used at the moment.