(1.3) Add syslock grp files for packages when required.

(1.2a): Make second signature verification also fail fast.

(1.2): Collect error codes from rsync calls and report failed hosts
at the end.  (gendoas 1.4: wrap pledge/unveil with conditional to only execute
on OpenBSD).

distribute: Changed name of $vv to $v_epoch (DONE)

Add a -h option to distribute to specify that a subset of the hosts
will get the files. -h would take either a single host name or a
comma-separated list; if any hosts in the list aren't identified
in the config as a recipient for a particular file specified, those
hosts don't get it (and perhaps print a warning to that effect, maybe
with a -v option). (DONE)

Add a -d debug option to print more processing information. (DONE)

Split into part that either runs as root or uses doas to get the files
to copy (though the vast majority are world readable), and runs non-priv
to do the building, signing, and distribution.
