Fixed

• Correctly support ES256 for pem files.
• Validate pubkey during deserialization in the policy engine.