Go 1.23 changed the behavior of [X509KeyPair] and [LoadX509KeyPair]
to populate the [Certificate.Leaf] field of the returned [Certificate].
The new `x509keypairleaf` [GODEBUG setting](/doc/godebug) is added for this behavior.