* revoke: try determine the server automatically When revoking via --cert-name, use the server from the lineage (unless overriden by the CLI). * RenewableCert.storage might be None * guard against an empty lineage server