Honour mandatory digest on private key in has_usable_cert()