crypto/http_pins: warn if single pin and remind unrelated requirement

Fixes #4