TEST: regression test for CVM-667
FIX: SignatureManager::LoadPublicRsaKeys() can ignore broken keys
TEST: adapt for restrictive version
SignatureManager::LoadPublicRsaKeys() fails on broken keys
set permissions for cvmfs_cache_t
add change log in cvmfs SELinux module
add cvmfs.fc to universal-spec
add cvmfs.fc to rpm build script
re-order `cvmfs_server publish`
FIX: fuser binary distinction not used
add has_file_descriptors_on_mount_point()
force remount on late open file descriptors
TEST: publish with open file descriptors
FIX: print warning only once
add root hash utility functions
use utility functions
remove automatic revision on `transaction`
do root hash comparison in `health_check()`
TEST: check root hash consistency
Refactor: unify open_transaction() and close_transaction()