static void nss_destroy_object(void *user, void *ptr)
{
  PK11GenericObject *obj = (PK11GenericObject *)ptr;
  (void) user;
  PK11_DestroyGenericObject(obj);
}

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.