pub fn check_host( d: &Descriptor, h: &HostSpec, allow_shell: bool, ) -> R<Vec<String>>
Check what the payload needs against what the frozen host declares.