Do we really want/need to allow a function here? Isn't a list of
files enough? A function is more dangerous than a string, especially
in a security-sensitive place.
It's just convenient. fetch-crl will generate close to 100+ CRL PEM files, so it's a bit impractical to enter by hand.