Add new command to generate revocation certs

This has been a feature request for some time and was requested
in the Gpg4all project. The revocation certificate is similarly
protected against accidental import as GnuPG's autogenerated
certificates.