Static kSecOIDPolicyConstraints 

pub unsafe static kSecOIDPolicyConstraints: &'static CFString

Available on crate feature SecCertificateOIDs only.

Apple’s documentation