Feature: CIB: drop support for unset or unknown validate-with
This breaks in-place upgrades (both rolling and cold) in clusters with validate-with configured like that.
Ref T810