AssignmentPolicy: ((newSubjectName: Name, oldCert: Certificate) => Promise<void>)

Callback to determine whether the owner of oldCert is allowed to obtain a certificate of newSubjectName. It should throw to disallow assignment.