For now this just reports top-level rejections, but this can be extended
as needed to eventually replace the need for local ad hoc debug output
when debugging validation issues. Since this is quite noisy, it makes
sense be able to disable that separately.