VCR: Allow configuration of revocation list max-age

[reinkrul]

This allows operations to continue if an issuer is temporarily down, longer than the default 15 minutes. It also allows disabling the cache, which can be useful for demos.