server.setup: add pyOpenSSL dep
server.cli: fix sys.path to allow running from the checkout tree, check py version for all commands
server: rewrote notary using argparse, strports - first step towards one-entry-point cli