.gitignore: ignore n3/ too
rrid.py: split key generation from token generation

This will make it possible for a mailbox server to create multiple
TIDs (one per recipient), which all share the same keypair (so the
mailbox can decrypt them all).