don't have the config being a global

move hosts into the config struct

ignore and clean fcgi.sock

fcgi-test: be less verbose

re-establish fastcgi test

move fastcgi from global var to the config struct while here also make them a list rather than a fixed-size array.

fix sandbox_server_process it does the unveil(2)ing based on the first config, which breaks config-reloading.

rework fcgi-test so that it binds a local socket still not re-enabled.

readd proxy certs and `require client ca' support Was temporarly disabled during the transition to real privsep. While here, fix a memory leak when using `require client ca'. Also, avoid leaking info about the parent address space layout to server processes by not sending pointer values.

configure: look for WAIT_ANY

fix typo

provide sandbox_main_process on !OpenBSD

fix build of proc.c on !OpenBSD

safety measure, explicitly memset config in config_init

keep cert/key/ocsp path as strings and don't send them via imsg