pub fn require_with_consent( cx: &Cx, name: &str, receipt: &ConsentReceipt, session: &EdgeId, ) -> Result<()>
Requires both a kernel grant and a session-bound visible consent receipt.