Don't display revoked certificates by default
Revoked certificates are purely informational, and low-value information at that. We should match the "puppet cert" output, and only display valid+pending certificates by default. The filters are there if people really want to see the revoked ones.
This is very useful to me: at time of writing, I have 80+ revoked certs, 7 valid, and 1 pending. It's hard to find the useful data with pagination=>20 :)