Default to disabling the deprecated nsCertType extension
Add full docs to TODO