the header's x5c, base64 DER, leaf first
the proven public key the leaf must certify
the enrolment challenge the attestation must carry
{ ok, attestation }, attested when the chain ends at a
trusted root and self-asserted otherwise, or a refusal
Verifies an Android Key Attestation carried in a proof's
x5c.