CSPRNG to generate deterministic pubkey per domain
seed interface for countercrypto
fixes #15, at last, the same certificate for each mitm'd host
fixes #17, doc typo