Some spec refactoring.
Use cached value for to_der; cache fingerprint.
Let get_by_fingerprint return id too. Use it to speed up ::token_signer.