- create default dummy cert in /etc/pki/tls
    - use a pseudo-random serial number on the dummy cert
    - change default ssl.conf to point at /etc/pki/tls
    - merge back -suexec subpackage; SELinux policy can now be used to
        persistently disable suexec (#155716)
    - drop /etc/httpd/conf/ssl.* directories and Makefiles
    - unconditionally enable PIE support
    - mod_ssl: fix for picking up -shutdown options (upstream #34452)