pub const kSecTrustResultDeny: SecTrustResultType = 3;