For Gosling, @richard could use signing and generation support in tor-cert. It's hack week, so I'll take a shot at it.