Add usage to validation

[martin-lindstrom]

Since validation certificates may have a usage (vac, test, recovery), we need to extend the CertificateProvider interface and also have an extra parameter for validate telling the usage.