generate self-signed certificate
check for user/group existence (bb #680)