Support a way to check if a cert/serverCert can be saved

[andrewpmartinez]

To extend enrollment via the identity library, SetCert or SetServerCert are called, but they may fail for various reasons. Some of those reasons warrant not starting the extend enrollment process at all, as it will never succeed. Add a way to check to see if the serverCert and cert are "settable."