cert: move the private key to a different location

The problem is that we use a Rake task to generate our gemspec file. And
every time I use that task, it substitutes my home path, which is not
good, because other maintainers won't be able to generate the gem.
CHANGELOG.md: mention krypt0graphee ch4ng3z