[dev/apple_crypto] Cannot export as PFX when collection (or cert) has no private keys

[bartonjs]

SecItemExport returns an error when the collection it is given has no private keys and it is exporting as a PKCS12/PFX.

At least, this behavior is true on macOS Sierra 10.12.3.