Make explicit_policy handling match expected RFC3280 behaviour.