As far as I know freeradius uses openssl to handle crls.
openssl also has an option -use_deltas to enable support for delta CRLs.
Is this option available in freeradius?
According to eap.conf it is  necessary to restart radiusd if a new version of a crl is published.
Are there plans to enable reading of a new crl without restarting the server?