#1306, #1377 are about somehow implementing verify_with_threshold() in the API. ngclient should use that instead of the helper function in `trusted_metadata_set.py` (and delete the helper in that module)
