Allow forcing encryption for not validated S/MIME certificates

This makes it possible to encrypt something for S/MIME certificates
that cannot be validated (e.g. because their root certificate is missing
or the CRL cannot be downloaded/checked).

• GnuPG-bug-id: T6702