Add setting for (dis)allowing of S/MIME certificate creation

This setting can be used to hide the functionality to create S/MIME
certificate signing requests independent of the setting for disabling
CMS completely.

GnuPG-bug-id: 5688