Support HX509_CERTS_UNPROTECT_ALL.