PolicyAuthorize with an external imported PEM key did not work if the default nameAlg for the imported key (sha1) was not equal to the default nameAlg in the current fapi profile. The nameAlg from the profile is now used for the imported key.
To prevent a possible double free after cleanup of a policy the NULL pointer is set for the reference to this policy.