Don't bother loading revoked certs if there are no trusted