When we update the CA certificates with vdt-update-certs, we should
preserve CRL files. Specifically, before we do install_certs():
If there is an existing certificates installation
Foreach *.r0 file:
If the CA for that .r0 file still exists in the new installation:
Copy the .r0 file from the old installation to the new