tools: k3_gen_x509_cert: Set default early HS JTAG access to disabled