Validation of certificate chains will fail before dcpomatic_setup()