Support certificate revocation lists in Service Mesh, specifically in Istio ingress gateway (as it validates client certificates for mTLS but doesn't check if it's revoked).

Discussed upstream and discarded, but there's still room for improvement in OSSM for customers.