The initca option can be used with an existing private key.

This is useful for generating a new certificate (i.e. with updated
signature scheme) from an existing private key.

This commit also adds the -bare option to cfssljson, which is used for
the responses from the command line that do not use the API response.