- man page tweaks
- allow passing options in certwatch.cron via $CERTWATCH_OPTS - require openssl with /etc/pki/tls
- support --days argument to genkey (#131045)