Function agent_token_or_dpop 

fn agent_token_or_dpop(
    registry: &dyn Registry,
    oauth: &OAuthState,
    headers: &HeaderMap,
    http_method: &str,
    path: &str,
) -> Result<Writer, ApiError>

require_agent_token_or_dpop, without writing a refusal down.