Don't remove staple files but zero them

When a certificate is not valid stapled removes the .ocsp file. Instead we should always have an ocsp-stub in place otherwise a restart of the associated haproxy is required.