IsSSHDeviceVerified returns true if cert contains all required device extensions.

IsTLSDeviceVerified returns true if ext contains all required device extensions.

VerifySSHUser verifies if the SSH certificate has the required extensions to fulfill the device trust configuration.

VerifyTLSUser verifies if the TLS identity has the required extensions to fulfill the device trust configuration.

ErrTrustedDeviceRequired is returned when access to a resource requires a trusted device.