keychain: use SearchCopyNext keychain enumeration for System certs as well