log that system cert chain is disabled only when using system chain, not pinned/anchored certs