s4:lib/tls: add tls_cert_generate() prototype to tls.h