vici: Properly add CRLs to the credential set