include component in verifier policy #387

The verifier currently ensures that all measurements from the RoT are present in the reference set. We also need to consider the components that these measurements represent. Since the SP can prevent the RoT from measuring it our policy must consider this.