redesign verifyAgainstKeys for configurable policy judgments

Given the caller has provided a policy that certain signature features elicit either errors or warnings When the replacement for verifyAgainstKeys encounters said signature features Then the replacement for verifyAgainstKeys records the warnings or errors as appropriate