Function apply_flags 

pub fn apply_flags(
    root: &Path,
    state: &Path,
    flags: &[String],
) -> Result<(), Box<CommandResult>>

--trust-hook name=digest…: trusts each for its current digest only (via = ci).

Errors

A refusal naming the flag that does not hold.