pub fn require_allow(decision: PolicyDecision, what: &str) -> Result<(), Status>
Convert an engine decision into a transport error, fail closed.