re-added the '-selfsign' option so that at least the 'newca' command works with opens...