PiperOrigin-RevId: 443571047
Call sites for the two checkpoints aren't added yet. PiperOrigin-RevId: 398375903
This defines common infrastructure for dynamically-configured security checks, including an example usage in the clone(2) path. PiperOrigin-RevId: 394797270