crypt32: Don't fail chain creation if root isn't self-signed.