AssignmentPolicy: ((newSubjectName: Name, email: string) => Promisable<void>)

Callback to determine whether the owner of email is allowed to obtain a certificate of newSubjectName. It should throw to disallow assignment.