replace dice-cert-tmpl & ca-script stuff

[flihp]

This approach was intended to be pragmatic but really it's just become a bit of a mess that now needs to be cleaned up. The creation of pki-playground was the first step in this direction. I've been and will continue to add features to the pki-playground to further this work and will link to this issue when appropriate / when I remember to.