Handle flags in output from "security" and filter out
revoked/expired/suspended/etc certificates. (#369)