Use openssl to verify the certificate

Using openssl is consistent with previous instructions and has the notable
virtue of being cross-platform.
Disable SSLv3 in all Apache vhosts
Tarsnap key should be 0600. Resolves #321.
Restrict permissions on Postgres backups files. Resolves #322.
Add openLDAP and GOSa