I just noticed that there is a bug in my implementation of the
--copy-policy-objects stuff in trousers 0.2.9 (I accidentally flipped
3 ifdefs to ifndefs). This can't be helping anyone understand what
the policy changes actually were. :-)
I will release a trousers 0.2.9.1 shortly with this fix and other
minor bug fixes.
For those who may be wondering, the effect of this bug was that keys
loaded from persistent storage directly got their own policies when
they should have just gotten references to the TSP context's default
Sorry for the inconvenience,
IBM LTC Security Dev.