scepclient: Don't use a block-scope buffer for the default DN