Don't walk over VPs in normal mode.

Debug code should only run when debugging is enabled
Handle replies from virtual servers, too
Add dependency on version of openssl with heartbleed fix based on distribution (debian or Ubuntu) and remove vulnerable openssl check at startup.
Fix PCRE checks on FreeBSD

Use FR_SMART_CHECK_LIB so we pick up the PCRE libraries on FreeBSD (they're in /usr/local/lib)

Pass pcre_lib_dir to FR_SMART_CHECK_LIB, so the user defined libpcre ./configure argument isn't ignored

Correct use of macros in the code, so we actually *use* the result of the -lpcre check

Remove unused variables and substitutions

Add output for extended regular expressions check
Don't leak expanded lhs/rhs in do_regex
Fix building without regex support
Can't build without regexes on Travis because it causes the tests to fail
Delete detaching message.  It's annoying
Added configure checks for trust router code
Fix typo
Reject on any channel bindings attribute mismatch
ABFAB (RFC 7055) is a new deployment.  In this case, it makes sense to
be very strict about channel bindings checks, because we have high
confidence that anyone supplying ABFAb channel bindings will supply
accurate info.

Other uses of channel bindings may require more liberal policies.
Add Moonshot-COI and Moonshot-APC attributes
Add ABFAB sample policy
* pre-proxy policy to enforce constraints that section 3.5 of RFC 7055
  say should be enforced near NAS

* authorize section to enforce policies enforced near home server according to RFC 7055 3.5
* Channel bindings policy to enforce ABFAB channel bindings
Virtual server for GSS-EAP (RFC 7055)

Include a virtual server for clients that use GSS-EAP (RFC 7055). This
server works both for proxies and for home servers that actually
perform authentication.
Updates and move some moonshot to Trust-Router
Module for PSK authorizations from ABFAB trust router
Missed in last commit
Let's build it, shall we?
Let's build it, shall we?
Final patches to make trust router work