pub const kSecTrustOptionLeafIsCA: SecTrustOptionFlags = 0x00000002;