Add pubkey definition in meta.
Move fingerprint checks to a separate function.
Split extract and check functions for repos.
Use correct signature length for pubkeys.
Update key definition for repo meta.

Now it should look like this one:

cert = {
	type = rsa;
	data = <<EOD
<big PEM BLOB>
EOD
	name = "pkg.freebsd.org.2013102301";
}

Meta can contain more than one cert.
Added by a mistake.
Add signatures free utility.
Fix issues with the new code.
Add `pkg_emit_sandbox_call` to make a sandbox.

This call is intended to execute some function that operates with some
fd inside a capsicum enabled sandbox.

TODO: support various fd and various capabilities
TODO: think about some sort of isolation if capsicum is disabled
Add `pkg_emit_sandbox_call` to make a sandbox.

This call is intended to execute some function that operates with some
fd inside a capsicum enabled sandbox.

TODO: support various fd and various capabilities
TODO: think about some sort of isolation if capsicum is disabled
Merge branch 'pubkey-meta'
Merge branch 'capsicum-emit'