sk_X509_POLICY_NODE_free
sk_X509_POLICY_NODE_free(*pnodes);
sk_X509_POLICY_NODE_free(tree->auth_policies);
sk_X509_POLICY_NODE_free(auth_nodes);