add test for additional unexpected arguments

increment version number

This prevents waiting for a close_notify when shutting down a connection.

Make "delay = yes" a default stunnel option. Also permit non-root users to view
the help text again.

This includes the following changes:

* Reduce inline comments that were mostly redundant to the code it
described

* Added another example to the man-page to make clear that TLS is
supported for CNAMEs. For that matter, all other options will also work
without change, given that internally the CNAME will only be resolved to
an FS-ID before handing back over to the same logic that is already in
place.

* Small modifications to better adhere to the given codestyle.

* Adjusted log messages as suggested.

This change introduces additional logic which allows the user to specify
either a fully-qualified EFS DNS name, or a custom DNS name that
resolves to a fully-qualified EFS DNS name via a CNAME record.

The EFS DNS name will then be compared to the EFS name we would have
expected for the given EFS ID. If it doesn't match, we'll show the user
a readable error message for this to aid in troubleshooting.

Once the EFS DNS name has been verified, the rest of the logic is
untouched. This means that this change only impacts the parameter logic
at the very start and does not touch anything of the already tested,
more critical logic.

Important: the usage and internal logic to mount by EFS ID is unchanged,
making this change fully backwards compatible.

Fixes #9.

* Add a manpage for mount.efs
* Improve warning messages in the mount helper
* Improve stunnel cleanup functionality

* Improve detection of root user
* Require OCSPaia and checkHost options for stunnel
* Install and use a hand-managed trust store

Includes a mount helper utility (mount.efs), an associated watchdog
process, unit tests, and build scripts.

The utility simplifies mounting and using EFS file systems and
optionally enables clients to mount over a TLS tunnel.