Daemon: make certificate revocation check behavior configurable

The current certificate revocation check performed by Schannel is done on a best effort basis, meaning if a CRL distribution point URL is not reachable, this does not imply a blocking error.

This behavior could be configurable, so users wanting to make the check more strict, or disable it altogether can do so.