applied with cleanups on top. I simply register a new format: PVE::JSONSchema::register_format( 'tls-policy-strict', \&pmg_verify_tls_policy_strict); and use that (instead of manual error handling).