Implement audited findings

crates/storage/src/recipient.rs

@@ -205,6 +205,15 @@ impl<'a> RecipientPolicyManager<'a> {
         signing: Option<&SigningPolicy>,
     ) -> Result<EffectiveRecipients, RecipientPolicyError> {
         let snapshot = self.repository.snapshot()?;
+        self.resolve_for_entry_in_snapshot(&snapshot, entry, signing)
+    }
+
+    pub(crate) fn resolve_for_entry_in_snapshot(
+        &self,
+        snapshot: &RepositorySnapshot,
+        entry: &EntryPath,
+        signing: Option<&SigningPolicy>,
+    ) -> Result<EffectiveRecipients, RecipientPolicyError> {
         let policy = snapshot.recipient_policy(entry).ok_or_else(|| {
             RecipientPolicyError::MissingRecipientPolicy {
                 entry: entry.clone(),