change the {user,group} params to nsstools::create

To be optional and and default to `undef`.
add param validation to nsstools::add_cert
add param validation to nsstools::add_cert_and_key
flesh out README