Rename has_credential to _has_credential

Also removed places where we guarded calling check_revoked_cert with
has_credential('crl'); the method already handles that internally.