I backed out the `WebserverSslCrlPath` in 4afe6b8, replacing with `schema/Str`s.  Looks like that's what we were doing elsewhere for keys with primitive types for their values.