pub type PredicateCallback<'handler> = dyn FnMut(&[Key], &mut [Admission]) + Send + 'handler; It runs on whichever thread runs the call, never on two at once within one call, so it owes Send and may be
FnMut. A panic inside it rejects the rest of the call's keys and resurfaces once the call is final.
Mirrors ustore_predicate_callback_t.