Nag/warn when removing KDM decryption certificate.