fn ensure_key_authorization_root_sender( actual: Address, expected: Option<Address>, ) -> Result<()>
Ensures key authorization artifacts are signed by the expected root account.