Make "src" the implicit "/usr/local" so that nobody can
sneak in weird files in the base file system or potentially
overwrite them.

This is the last time, I swear...  :)

Also update the certificate generation process and put in our info.  :)

Now use the base system's tzdata, which we update regularly...