One RICAL trust constraint, with each value CBOR-encoded as unpadded Base64URL.
Constraint name to its CBOR-encoded value, using unpadded Base64URL.