pkcs11: GNUTLS_PKCS11_FLAG_MANUAL prevents pkcs11 verification
When a PKCS#11 trust module is used, but gnutls_pkcs11_init()
is explicitly called with GNUTLS_PKCS11_FLAG_MANUAL
flag, then the PKCS#11 trust store will not be loaded, and thus prevent any certificate validation.