Fix most open issues, paths, tmp cleanup, etc

 * No longer use set -e, instead, provide better errors
 * Support non-standard homebrew paths
 * Only update the installed pem if the contents are different
 * Cleanup the tmpdir after execution (unless pem verify fails)
 * Leave notes in the system log