Separate local and offline sections; they have distinct needs

[mmccool]

split the local and offline network discussion into two separate sections. They have different needs and capabilities. In particular a LAN with network access can access external systems to validate certs (e.g. to check for revocation status), an offline one cannot.

See discussion in PR #28