gather/ldap_esc_vulnerable_cert_finder - Disclose when templates are configured to pend requests.

[aquinn-r7]

If we find templates that are configured with the msPKI-Enrollment-FlagCT_FLAG_PEND_ALL_REQUESTS bit set, all requests will pend unless the administrator approves the CSR. We should note to the user that requests to these templates will pend and not generate certificates ahead of time to reduce noise within the environment.

I may take a look into doing this myself. It should be a fairly easy lift, and should only require observation of the bit setting. If identified, we can raise an alert to the user that requests to the template will fail regardless of vulnerability status.