Perform issuer operations without accessing tails file

[andrewwhitehead]

A revocation witness is now created during the issuance process, which matches the usual pattern of usage, and is much faster for the issuer to create than for the prover.

Large updates to the revocation registry may be faster depending on I/O speed (which is no longer a factor).