Add ability to search on certificate revocation status
    
    This can be used to narrow the candidate list of
    certificates when deleting objects like hosts and
    service.
    
    Related: https://pagure.io/freeipa/issue/7835
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>