If dynamic CA configuration disabled - return error

When "The dynamic CA configuration feature is in the disabled state" `mkcert -install` put certificate to the appropriate place and call `update-ca-trust extract` (for Linux / CentOS 6 for example).
This util produced Warning output and does nothing with certs.

```sh
[root@centos]# update-ca-trust extract
update-ca-trust: Warning: The dynamic CA configuration feature is in the disabled state
So CA cert was not installed.
```

Proposed to chek that "The dynamic CA configuration feature is in the disabled state" and return non zero result code when trying to install the certificate.

Start with the mkcert -install path for Linux and the call to update-ca-trust extract, using the CentOS 6 behavior described in the issue as the reproduction case. Confirm how the warning is currently handled and verify that a disabled dynamic CA configuration produces a non-zero result instead of reporting successful installation.

Written by the indexing model from the issue text.