Suggested by: @fabianfrz

Suggested by: @andreas-p
Inspired by:  pfSense

(model) CertificateField missing cert type in cache, closes https://github.com/opnsense/core/issues/1095

(auth) extend system_authservers.php for pluggable auth connectors, remove totp properties (moved to connector)

(auth) add type/description connector methods and small, for https://github.com/opnsense/core/issues/1085

(auth) extend AuthenticationFactory to support pluggable connectors, for https://github.com/opnsense/core/issues/1085

allow to use CRLs with CertificateField

(openvpn, client export) remove windows installer, add Viscosity visz format for windows. closes https://github.com/opnsense/core/issues/994

PR: https://forum.opnsense.org/index.php?topic=3462.0

(config) switch default for offloading features, closes https://github.com/opnsense/core/issues/1092

Put custom scrub rules first

The custom scrub rules on the normalization settings page effectively
cannot be reached since the standard interface scrub rules are listed
first.

This patch swaps that order around so that custom scrub rules get
evaluated first.