Joe, this was a good find. You've figured out how the policy.bin was created. I've tried creating another policy.bin. I was successful but, unfortunatly, it doesn't do any better than the one posted originally in the first post. There is no way to use this policy compiler to open up the application permissions from what the BES pushed out in policy.
Good work, though. I now know how to create a policy.bin.