This is continuation of token policy work from ticket #882
This patch provides
1. the 2nd part (and not last) of the token policy work
- determining policies for Enrollment, Re-enrollment, Renewal,
Recovery, and Revocation
(note: Recovery decision needs more refinement in later patch. The
generateCertsAfterRenewalRecoveryPolicy method is currently just a close
translation from the original TPS and is extremely complex. It deserves
some close inspection and improvement at later time, in next round)
2. revocation for certificates due to token operations
(note: administrator initiated will be handled in later patch)
thanks,
Christina