fix logic to zap trailing comma from SSL_PROXY_SCT_SOURCES

it previously zapped the "p" of "ocsp"