Hide the SAN check unless we need it for debugging

Signed-off-by: Michael Casadevall <mcasadevall@ubuntu.com>