fixes security flaw. gencert now saves output files by default to ~/.golab
otherwise the certs dir may well be shared  with participants through golab
at which point the unencrypted server and client keys are compromised.