constraints: Add certificate policy and policy mapping unit tests