Hammurabi: A Framework for Pluggable, Logic-based X.509 Certificate Validation Policies