tentative `listen`
simplify + style
use types from mirage proper
server cert non-optional
shortened CA version

The crunchiest version *yet*, according to a poll by KV_RO.
example mirage tls server