Switch to using easyrsa release tarballs

Instead of using easyrsa directly from git, use a release tarball.
Provide custom entry point instead of bash

Use a custom entry point instead of bash so that we can make the default
user experience a little bit better. The user can still use the
--entrypoint argument to switch back to the bash shell.