Improve Certificate Revocation

Currently revoking a node's certificate can get very complicated in more complex deployments (e.g. those involving PuppetDB or a node classifier). We should make this process simpler from a user perspective, with fewer manual steps that are smarter about what work needs to be performed. This epic contains tickets relating to that effort.