pub fn is_certificate_denied( transaction_digest: &TransactionDigest, certificate_deny_set: &HashSet<TransactionDigest>, ) -> bool