FIPS and Self Signed Certs

This pull request contains two enhancements:

* It adds a new type for creating self signed cert and key directly in the NSS DB rather then using a preexisting key with add_cert_and_key

* It adds an option to the create type for enabling FIPS mode on the DB
why was this necessary?