Bump version so that next build will be possible.
Assure that TL value read is complete

There is no hard guarantee that all 4 bytes will come.  In practice,
I've never seen this occur, but to be complete, should make sure recv gets everything it was supposed to.
Switch to using fingerprint of cert for knownhosts

Some clients have their lives made more convenient by having the
sha512 hash rather than the actual certificate.  Prepend with 'sha512$'
to allow for a future where different formats could be specified.
Move to port 6001 for the TLS socket

4001 is taken, so move to 6001 which is not taken by the registry.