- update to 0.49:
     - when using an NSS database, skip loading the module database (#743042)
     - when using an NSS database, skip loading root certs
     - generate SPKAC values when generating CSRs, though we don't do anything with SPKAC values yet
     - internally maintain and use challenge passwords, if we have them
     - behave better when certificates have shorter lifetimes
     - add/recognize/handle notification type "none"
     - getcert: error out when "list -c" finds no matching CA (#743488)
     - getcert: error out when "list -i" finds no matching request (#743485)
     - don't incorrectly assume that CERT_ImportCerts() returns a NULL-terminated array (#742348)
     - getcert: distinguish between {stat() succeeds but isn't a directory} and {stat() failed} when printing an error message (#739903)
     - getcert resubmit/start-tracking: when we're looking for an existing request by ID, and we don't find one, note that specifically (#741262)