Hammurabi: A Framework for Pluggable, Logic-Based X.509 Certificate Validation Policies