issue critical state when key is revoked.

if a key has been revoked, the whole expiry checking ordeal has no
point.

verifying the revocation state must be done after updating info from
keyservers.