the reserved word, NONE, was introduced in 1.5 to represent
a "null" keystore URL. specifically, J2SE components
(keytool, jarsigner, JSSE, for example) all pass null as the
keystore input stream when calling the KeyStore.load method
if the keystore URL is NONE.

we forgot to make this change to PolicyTool.
PolicyTool also does not recognize/parse the new
keystorePasswordURL policy file entry.