Need a user guide

[bob-fontana]

The steps for:

1. Creating certificate keypairs,
   2. Copying them to the appropriate card object directory (if not using mkall.sh
   3. Signing the correct objects
   4. Encoding them on the card (today Oberther ID-One PIV, and tomorrow our own populator)

Need to be documented.