refresh expired certificates

also more field types

otherwise it is confusing...

needs backend support to properly work

fixes the gpg tests

primarily creation and deletion of domains now happens through resource
interface. The commit also adds some more convenience to resource
creation in general. For example it can show associated information,
and e.g., warn if dependent elements are going to be deleted.

immediately freeing email addresses needs support from iapi in separate
pr

also less scary messages