add support for:
- Issuing certificates to be valid in the future
- Overriding the default 2hr window certs can be downloaded from S3
Merge branch 'starts-in' of github.com:synfinatic/ssh-ca into starts-in

Conflicts:
	scripts/sign_key