I'm ok with the current behaviour for now, but this class really ought to:
- persist cache changes to disk
- time out things that could time out, like trust decisions or revocation status