Add possibility to refresh an individual certificate

This allows the user to update a certificate explicitly. For OpenPGP keys
a --locate-external-keys and a --recv-keys is performed. For S/MIME
certificates the CRLs are updated and the certificate is revalidated.

GnuPG-bug-id: 5951