Respect enforce_critical setting in x509 plugin CRLs