This is not the fix I have been meaning to push, but openssl_encrypt()
and openssl_decrypt() are too low level.  They do AES-256-CBC, but not
key derivation as well as salt and IV handling.  Getting this 100%
compatible with OpenSSL was the blocker then.  Also, experts have said
that the cipher should not be used anymore, adding more annoyances as
this config output does not have a version information prefix...

Added profile option to check_reload_status (configd), measured framework overhead, current max processing for the daemon is about 6200 req/s on my macbook. ( limited by socket.accept, if needed we could implement another dispatch method in the future)

Simple implementation to use the backend service from the frontend implemented.

While there, "maybe" copyright translates to "yes" copyright.
If someone wants to oppose this, feel free to verify each code
line and submit a pull request to remove those two statements.

We do not want to use OpenSSL from base and it may go away at
some point as well, breaking e.g. this page.  Instead, use the
internal tools or the OpenSSL plugin.  More of this on the way.

* US and CA are in the alphabetic list already; no more favouritism.

* Use require_once consistently.  Minor header tweaks.

* Replace legacy State/City info and fix spelling for "Saschsen".

Nice touch Jos, I had a big smile on my face while skimming that
commit.  :)

* added save/backup actions on config class

* initial model implementation using Phalcon validators and custom binding to config object

Still a lot to dow here, no impact on current install base

Really don't want to ship this file locally so that others
might be encouraged to edit it (again).

* Prefer the openssh-portable port, but fall back to the base
  version if it is available.

* Refactor the key generation to produce less duplicated code.

* Locking is completely bogus, but I have no clue how to fix
  that short term without doing a full audit of the subsystem-dirty
  mechanic.

While there, remove custom code and things that are not
needed.  Also, there's this thing called `require_once'.