Fail closed: verifying a certificate for an unregistered domain throws TrustPinError.DomainNotRegistered. Recommended for production.