An application of policy-based signature: proof-carrying proxy certificates