Initial support for BerkeleyDB databases: localid.db and disclose.db
* for now, PKCS #11 URIs are actually (relative) filenames
* transactions are not 100% functional, may need tlspool restart w/ DB_RECOVER
* Client certificates from DB; PGP key exchange crashes; X.509 works