anon certs again

[Robert Olson]

this occurred to me while working on the anon stuff last night: it doesn't 
make any sense to have an anonymous service cert, since a service cert 
declares the name of the host on which a named service is running.

Hence, I'm currently planning on integrating the request of anonymous certs 
by adding them as a third option - identity, service, anon. (host cert 
request already commented out from my copy of the code).

--bob