add option to control whether CMP responder certificate is included in
the response, and whether message time in request is required.