While this still doesn't affect the behavior of the daemon, the
configuration option can at least be set to check the correct privsep
directory for permissions. Revisit in 5.8 as a possible extension to the
runtime check instead to remove the 'knob'.

Document CA path option.

This has effectively been a no-op during the 5.7 release series and
nobody has yelped (other than being slightly confused about its
purpose). Remove it as an option, since the home dir of the privsep user
is always used as the actual privsep directory anyway.

replace "this this" by "like this"

Add a post-install check to ensure that PRIVSEP_PATH is really empty.

- add OS X privsep user creation instructions from jasper@
- update install instructions to be the same everywhere
- remove outdated compiler flags

First attempt at building a new OpenNTPD portable project, based on the
latest OpenBSD source.