VerifyPurpose
High-level purpose applied during path validation to enforce leaf constraints.
type VerifyPurpose = "serverAuth" | "clientAuth" | "ca"
