crypt32: Only apply a name constraint if the name form is present.