Customer has a requirement for SOFT_FAIL when OCSP services are not available.  The requirements are as follows:

   * Apply SOFT_FAIL to incoming TLS connections on acceptors

   * Apply SOFT_FAIL to outgoing TLS connections (for example, to LDAP servers, bridge connections, etc.)

   * Log SOFT_FAIL activity and any denials