automatically record a new CA certificate. Hand the certificate off
to cacontrol, which will provisionally accept the certificate so that
the caller can then register their other certificates.

have been approved. Only used by the Clearinghouse to control who gets
a credential to access the Clearinghouse. This is part of the changes
to fully automate the installation of new ProtoGENI sites.

geni_cas table. If the issuer (CA) is not in the table, this is a new
registration and the credential is given the specific privilege
'register_authority' which allows the new site to do only one thing;
register their new certificates at the clearing house.

sliverstatus. Change CM name from keys to users.

No more 768MB limit for memory.
Use FreeBSD 9 kernel if available, it is more stable with Xen.

This reverts commit f352b4d5.

the CM; we return the entire set of logins (keys) that were included
when the sliver was created. Format looks like:

	keys => [{'urn'   => $urn.
	          'login' => $login,
		  'keys'  => [...] },
		 {'urn'   => $urn.
	          'login' => $login,
		  'keys'  => [...] }];

This is *not* integrated with the AM yet.

that list.

1. Change default slice expiration to a new site variable called
   protogeni/default_slice_lifetime, defaults to six hours.

2. Add a site variable (protogeni/warn_short_slices) to tell the
   sa_daemon if it should send email to war about short lived slices
   expiring, defaults to off.

confuses the user.

devices (for creating the stack object). We were using the older
mapping code (that computes on the fly) in the snmpit front end, but
now we use the DB in both the front end, and from the stack later.

from tbacct, which happens in the context of the project/group root,
not as the user.

So we can specify a different slice (partition) to create the filesystem on.

This is for BSD, so that we can tweak the default /boot/loader.conf file
to turn off "comconsole" on machines that don't have a UART.
In my experience, trying to probe the UART on newer machines that don't
have one causes a kernel crash.

Currently this attribute is just signalled by the existance of the
/etc/testbed/isvgaonly file in the diskloader MFS. But this will be
eventually sent over via "tmcc loadinfo" so that we can set the attribute
on a per-node-type or per-node basis.