<desc>This policy defines who has rights to modifycertificate mapping policies. Currently only certificateowner can edit mapping rules!</desc>