Only request VALID certs when revoking certs for a host/service
    
    This utilizes the new status option so that we only retrieve
    VALID certificates when revoking certificates issued for a
    specific host or service.
    
    ae74d348c3da580264c56441c136af3fc6ae58df made a special case
    in cert_find when searching for hosts and services so that if only
    one host/service was searched on do a subject search. It only
    works when there is exactly one option requested.
    
    Since we want to restrict to only VALID certificates, pass
    the hostname as subject directly when revoking certs when deleting
    an entry to limit the number of certificates to consider.
    
    https://pagure.io/freeipa/issue/7835
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>