Add "self-sign" command to ofp-pki.