fts-cron: allow to disable fetch_crl

[rcarpa]

For people who mount the final CRLs directly into the container.

If not explicitly disabled, default to the old behavior of fetching the CRLs.