Also exclude invalid certificates when filtering for valid certificates

"invalid" here means a specific state of a certificate like "expired" or
"revoked". "valid" here means any certificate that is neither expired
nor revoked nor invalid nor otherwise "bad".

(cherry picked from commit f0897ec90ec0135cc024370e9fcf2970eb64a040)

• GnuPG-bug-id: T7950