Copy in go/src/pkg/crypto/tls/generate_cert.go as command-generate-cert.go.
Adapt to work as a sub-command.
Multiple spool support.