fn validate_session_authorization_policy( session: &SessionEntry, authorization: &KeyAuthorization, ) -> Result<()>