feat: add options to configure CRL IDP flags

[savely-krasovsky]

Name of feature:

Allow to configure CRL IDP onlyContainsUserCerts and onlyContainsCACerts flags.

Pain or issue this feature alleviates:

Why is this important to the project (if not answered above):

Is there documentation on how to use this feature? If so, where?

In what environments or workflows is this feature supported?

In what environments or workflows is this feature explicitly NOT supported (if any)?

Supporting links/other PRs/issues:

💔Thank you!

[CLAassistant]

All committers have signed the CLA.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[maraino]

I haven't tried, but my I think that if you set idpOnlyContainsCACerts and you revoke a "user" certificate, that will also appear in the CRL.