Verifying that SCEP policies are being applied correctly