no need to handle left/right cert as a special for output
Merge branch 'master' of github.com:mcr/Openswan
some minor enhancements to newhostkey to use /dev/urandom by default, and fill in the
debian place for ipsec.secrets.inc if it exists, but is zero