Allow definition of network with private_key set, but client_cert not
set, as this is the format wpa_supplicant expects PKCS#12 bundles to be
used. Reject requests with client_cert but no private_key.