Support for generating client certs

katello-ssl-tool takes now --purpose as an argument, because other
certificates than web-server ones are needed to be generated as well.

It's now possible to generate client certificates with this script (for example
for child nodes to be able to access the protected parent repos)