s/s_main/s/ where it is used only for logging
be explicit about what APR_FINFO we need
start grabbing a mutex around accesses to the file of collated SCTs