pub const kSecCSCheckTrustedAnchors: SecCSFlags = 1 << 27; // 0x0800_0000u32