Add CRL checking for client certificate

If the client provides a certificate, make sure it is actually valid AND
not revoked.

See also basho/riak_test#416