(PE-991) Log when nodes are rejected by cert whitelist

Otherwise, the user would have no (obvious) indication why their
request was rejected.