Clear the req->wrk while holding the oh mutex, to close a race
against the busy-list.

Fixes #1342
Take a stab at #1341
By default ignore an <esi:include> with src="https://..."

Feature +esi_ignore_https treats it as http://... instead.

Default is "safe" in order to not expose any data by accident.

Fixes #1333
Retire the "esi_syntax" bitmap parameter, and turn the still remaining
bits into "feature" and "debug" flags.
Implement relational expects (>, >=, < & <=)

You have to be careful when you use them though: They compare strings.
Turn obj.hits and obj.last_use (notice new '_', see below) into VCL
only variables, and add a commented example in default.vcl.

The reason for this is to avoid VM write-backs to cached objects by default.

Previously we did this with the obj_readonly parameter, but this puts
it right where the user can see it.

Notice that the two variables are not locked, so they cannot be
trusted to be precise.

obj.lastuse changes to obj.last_use because its type changes from
DURATION to TIME, (and to improve readability in general)

Fix & Polish relevant test-cases
Long overdue rename of libvcl to libvcc.
Try to make Jenkins happier
Add a necessay cast
Eat more space now that struct obj got smaller
More tweaking of test-cases for Jenkins
More test-case tweaking for Jenkins.  This time based on actually
understanding what the test-cases do.
More test-case tuning for Jenkins
Tune another test-case
More test-case finetuning.

I'm never going to change the size of struct obj again...
Slightly polish the vmod loading/unloading code.

dlopen/dlclose(3) is deficient in at least two ways, possibly three:

1. It assumes that if the path is the same, the file is the same.
   This makes it impossible to update VMODs in place by any means.

2. It doesn't map the dlopen'ed object in copy-on-write mode.
   This makes things explode if you try anyway, without a rename-guard.

3. It doesn't handle atexit(3) from dlopen(3)'ed code correctly on dlclose(3)
   This makes gcov(1) and friends explode.  The fault could be said to be
   on their part though:  atexit(3) from symlinked code is undefined.

Since there is no sensible way to work around this, live with it, and
rely on whatever check dlopen(3) uses for identity, rather than have
our own name-comparison.
Fix issues exposed by different scheduling on OmniOS.

Notice the "-wait" necessary before reconfiguring server s1, this
mistake is probably present in other testcases too.
Add a delay for EXP to act
Make sure we don't progress the request while the SIGSEGV happens.
Increase connect_timeout default from 0.7 to 3.5 seconds to make
room for a lost SYN or a slow test-box.