pub trait SecurityViolationPolicy<C: Claim> { fn check_violation(claims: &[C]) -> Option<&'static str>; }