Improve DB performance of bad-key-revoker

[jsha]

In findUnrevoked, we should use rows.Scan to stream rows rather than reading them all in one go. We should also remove the ORDER BY and LIMIT. Instead of those, we should instead let the database do its work of building a temporary table of our results, and then work our way through it.