makecert: generate self-signed RDP certificate