pub const kSecTrustOptionRequireRevPerCert: SecTrustOptionFlags = 0x0000_0010;