Function unmet_sql 

pub fn unmet_sql(u: &str, pp: &str) -> String

SQL: the conditions of the policy row pp that the user aliased u does not meet with their stored claims and last sign-in (TRUE = not met). Without conditions (or without a policy row) it is FALSE.