pub fn manifest_decode_with_depth_limit<T>(
    buf: &[u8],
    depth_limit: usize
) -> Result<T, DecodeError>
where T: ManifestDecode,