1) relax the self-signing cert requirement in abac_verifier 2) allow space in extract_cn's pcn string