naclcert generate/validate implementation