Implement system tests for every field in the policy files

[bal-e]

Some policy settings are covered by other issues (#341 for review hooks, #342 for signing, TODO for key rollovers). This issue covers all the rest (which may need to be updated over time):

• Test that policies with references to non-existent HSM servers cannot be loaded
• Test that the send-notify-to setting works correctly