Create the lockdir post-reboot
CURVE Security

Clockwork now supports CURVE PDU encryption, as provided by libzmq 4.0.4
and libsodium.  Keys are distributed and stored as certificates, which
contain an identity string, a public key and optionally a private key,
in hexadecimal notation.  A new ZAP handler for clockd validates client
public keys against a trust database of signed public keys.

New utilities for dealing with these features include:

- cwkey(1) for generating new certificates / keypairs
- cwtrust(1) for managing trust databases

A bevvy of updates to related documentation and vim syntax files
accompany this new feature, and it's been tested fairly thoroughly.