Add doc on when to use SCT callback. With help from Viktor. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>