optional: ocsp transparent retrieval of responses
Currently we require the application to provide the file location of OCSP responses which are supposed to be updated somehow (e.g., via cron). However in practice that doesn't seem to work. Application don't update these responses, and administrators don't setup update scripts. We should provide a way for an application to configure a transparent update of the responses in proper time (e.g., prior to expiration).