Switched constant time compare to be less variable, webkeyset requires ssl
by default and adds mechansim to identify self signed certs.