Add support for checking extant connections when the CRL is reloaded and
shutting down any connections where the certificate has been revoked.

This is probably a rare use of the client (usually it will not be checking
the NFS server's certificate and maintaining a CRL in the client), but I
cloned the code in rpc.tlsservd.c to do this the same way.