I noticed that stapled will accept and cache an OCSP response that indicates a certificate has been revoked. In my case, I actually want this to happen (similar to #38), but it might be nice to provide an option (possibly default?) to treat a response as bad if revoked.
