KBS does not support multiple attestation policies

[fitzthum]

This issue is for discussion rather than any immediate fix.

Recently we updated the AS API to allow callers to specify the ids of the policies that are evaluated. We don't make use of this in our KBS should we? Perhaps we could allow the client to select which policies to evaluate?