Key Usage extension now mandatory

This provides better errors when trying to use a certificate whose private key is flagged for signatures only, but the certificate itself didn't bother to include a key usage extension to communicate this.  (There may be a correlation between Enhanced Key Usage extensions and signing / encryption key usage, but I haven't been able to find any documentation on this.)

Addresses #5 .