- note that SELinux usually confines us to writing only to cert_t in
      doc/getting-started.txt (#765599)
    - fix crashes when we add a request during our first run when we're
      populating the hard-coded CA list
    - properly deal with cases where a path is passed to us is "./XXX"
    - in session mode, create our data directories as we go