add .gitignore
add option parsing, require specifying ee and root
add PEM decoding support and basic verification