SSH_ALLOWED_CA_SIGALGS
def_sig = match_filter_allowlist(SSH_ALLOWED_CA_SIGALGS, all_sig);
SSH_ALLOWED_CA_SIGALGS, &reason) != 0) {