code: func NewKeyPolicy(weakKeyFile string) (KeyPolicy, error) {
  	kp := KeyPolicy{
  		AllowRSA:           true,
  		AllowECDSANISTP256: true,
  		AllowECDSANISTP384: true,
  	}
  	if weakKeyFile != "" {
  		keyList, err := LoadWeakRSASuffixes(weakKeyFile)
  		if err != nil {
  			return KeyPolicy{}, err
  		}
  		kp.weakRSAList = keyList
  	}
  	return kp, nil
  }
docs: // NewKeyPolicy returns a KeyPolicy that allows RSA, ECDSA256 and ECDSA384.
  // weakKeyFile contains the path to a JSON file containing truncated modulus
  // hashes of known weak RSA keys. If this argument is empty RSA modulus hash
  // checking will be disabled.