Build Enrollment Chains With Intermediates

[andrewpmartinez]

When building chains for enrollment, the chain of the signer is not taken into account for any intermediates. This means that the intermediates must be in the CAs bundle instead - which should not be necessary.

Instead, add the chain from the enrollment certificates to the pool's intermediate candidates.