2 - Distinguish downloading an authority certificate by identity digest from
3 downloading one by identity digest/signing key digest pair; formerly we
4 always request them only by identity digest and get the newest one even
5 when we wanted one with a different signing key. Then we would complain
6 about being given a certificate we already had, and never get the one we
7 really wanted. Now we use the "fp-sk/" resource as well as the "fp/"
8 resource to request the one we want. Fixes bug 5595.