fixup! WIP: ca: Migrate to new registered OID

caucase/ca.py

@@ -431,13 +431,12 @@ class CertificateAuthority(object):
       if auto_signed != _AUTO_SIGNED_PASSTHROUGH:
         # Prevent any caucase extension from being smuggled, especially the
         # "auto-signed" one...
-        policy_list = []
-        for policy in certificate_policies.value:
-          if policy.policy_identifier.dotted_string.startswith(
-            utils.CAUCASE_OID_TOP
-          ):
-            continue
-          policy_list.append(policy)
+        policy_list = [
+          x for x in certificate_policies.value
+          if not x.policy_identifier.dotted_string.startswith(
+            utils.CAUCASE_OID_TOP,
+          )
+        ]
         if auto_signed == _AUTO_SIGNED_YES:
           # ...but do add auto-signed extension if we are auto-signing.
           policy_list.append(utils.CAUCASE_POLICY_INFORMATION_AUTO_SIGNED)