Also exclude invalid certificates when filtering for valid certificates

"invalid" here means a specific state of a certificate like "expired" or
"revoked". "valid" here means any certificate that is neither expired
nor revoked nor invalid nor otherwise "bad".

• GnuPG-bug-id: T7950