issue #2: core: added cfg cmds for production cert and private key, explicitly marked current cert and private key as throwaway cert and key, added warning to log, added info to README