With the introduction of IssuerConfig.Profiles, it seems like we could use an empty set of profiles instead of the boolean Active.

I haven't done a thorough review of all the code using it, but a quick skim looks like we might be able to eliminate it.