Don't pass a timeout of 0 ticks to pause() for a delay of less than 1
hz tick.  On 8.x this results in an infinite sleep as pause() does not
support a delay of 0 ticks.  Since all delay values are converted from
nanoseconds to ticks using a floor function, skipping the sleep for a
delay smaller than 1 tick is the more consistent than rounding up to a
single tick.

This is a direct commit to 8 and 9 as 10.x and later use pause_sbt()
instead.

Reviewed by:	avg
MFC Pkg configuration, known public key, and pkg(7) changes to align with pkg(8)

This partially merges:
    r229068,r237795,r252048,r257145,r257147,r257150,r257150,r257159,r257164,
    r257168,r257344,r257344,r257667,r257668,r258227,r258550,r263937,r264420

- etc/
  - Bring in current pkg configuration from head
  - Add /etc/pkg/ and /usr/share/keys to mtree
- share/keys
  - Bring in trusted key fingerprint from head
- share/man/man7
  - Document /usr/share/keys/pkg
- usr.sbin/pkg
  - No longer create pkg.conf as it is deprecated in pkg(8).
  - Show security warning when bootstrapping.
    * This is a direct commit as the signature verification is not being
      MFC'd due to being too large.

Discussed with:	bapt, gjb
MFC r249803:

	Add support for Intel C600/X79 Series Chipset KT Controller.

PR:		kern/177072
MFC: r264315, r264316

Fix Xref order in SEE ALSO.
Cherry-pick OpenSSL changeset 5be1ae2:

====
Author: Dr. Stephen Henson <steve@openssl.org>

Treat a zero length passed to ssleay_rand_add a no op: the existing logic
zeroes the md value which is very bad. OpenSSL itself never does this
internally and the actual call doesn't make sense as it would be passing
zero bytes of entropy.

Thanks to Marcus Meissner <meissner@suse.de> for reporting this bug.
====

This is a direct commit to stable/8 and stable/9.  -HEAD and stable/10
already have this fix as part of OpenSSL 1.0.1g.

Noticed by:	koobs
Reviewed by:	benl (maintainer)
MFC r264340:
Correct IMOD default value according to comment.
MFC r264344:
Tune buffer sizes for SuperSpeed USB when using LibUSB v0.1 and v1.0
APIs to increase the maximum bandwidth limit.