The policy converter will handle publisher rules by porting the CN=<> rules and chaining to the AuthRoot/Trusted Root. The tool will also add a CiSigner rule reference.