Address Daira's comment about documenting the order of certificates passed to verify_callback.