pub const CTT_HEADER: i64 = 270;
COSE header 270: unprotected timestamp token; its presence establishes no TSA trust.