2 - Clients now reject any directory authority certificates lacking
3 a dir-key-crosscert element. These have been included since
4 0.2.1.9-alpha, so there's no real reason for them to be optional
5 any longer. Completes proposal 157. Resolves ticket 10162.