pub fn manifest_decode_with_depth_limit<T: ManifestDecode>(
    buf: &[u8],
    depth_limit: usize
) -> Result<T, DecodeError>