Implement self-signing in 'openssl ca'. This makes it easier to have