Yeah, the CRL doesn't feel like a "keystore" thing to me since nothing in the "keystore" uses it.  Just like "client-auth" feels like something different as well.