Verify SSL certificate before any request

Use a list of root certificates from Mozilla, which is licensed under
GLv2, too. In any case, [1] allows us to use the file even under MPL.

[1]: http://www.mozilla.org/MPL/2.0/combining-mpl-and-gpl.html

Fixes CVE-2013-2073.
Make cacert.pem work for windows, eggs etc, too

Use pkg_resources to locate data files. Also, when in windows, store the
certificates file in the app's directory.
Fallback to distro-specific files for SSL certs

Rely on the distributions to provide any updates.
Limit the number of wildcards in a SSL cert to two

We shouldn't have more than two in practice.
Merge branch 'ssl'
Drop erroneous file header

Link and license mentioned are wrong.
Bump version to 0.9