fn identity_rejection_key_retained_bytes(path: &str) -> Result<u64, CliError>
Count one retained rejection-membership key and its owned path text.