libressl: provide a default /etc/ssl/openssl.cnf; rename passwd.1 to libressl-passwd.1.