Allow SSL CA to be defined in vhost
Separate out blowfish secret into another file

This means that regular users can't discover the secret and is in line
with the Debian distribution config
Merge branch 'separate-blowfish'