util.sasl.scram: Compare gs2-header to cbind-input (Thanks Tobias)
util.sasl.scram: Create the state table as late as possible, keep state in locals for faster access
util.sasl.scram: Rewrite patterns and capture client-first-message-bare, client-final-message-without-proof
util.sasl.scram: Cache profile name instead of concatenating when used
util.sasl.scram: Rename variable for clarity
certmanager: Add back single_dh_use and single_ecdh_use to default options (Zash breaks, Zash unbreaks)
Merge 0.10->trunk