Clear some tunables from agent

Update the rekey::agent class to assume that the CA cert is
auto-generated, or at least available in the module's var dir on the
master.
Add a first-draft readme file