user add changes:

allow "-u" to also create a user, although secret generation will only happen
when the user enrolls.
'use within' is not 20 minutes, up from 5
what's up?  The docs!