Bug 991177: Disallow overrides for SEC_ERROR_CA_CERT_INVALID (r=keeler)