TODO

make patchfile for net/tls changes
integrate patchfile into Makefile
create standalone x509 certificate representation
if --log-to-stdout && no cert export requested, don't touch the file system