Cleanup deprecated stuff in SCEP
Implement CalcApproval, add manual approval in SCEP
Add notbefore/notafter handling for token alias

the functional token discovery can now be tricked by
customizable notbefore/notafter dates in the alias table.
Introduces the new handling inside the token api and delivery
functionality to manage via openxpkiadm.
Remove root cert from scep getca command
Fix params list for get_ca_list api call
Invent new alias group "root", adjust db schema and extend openxpkiadm
Adjust scep getnextcacert to use root alias instead of issuer chain