calling the applet without the certificate using a policy file only