Ensure that we encourage users to also pin ISRG X2 in their TLSA records