Match empty CA list to anything for ssl client auth in CryptoAPI engine.