Extend crypto and ssl_certs abstractions

• ssl_certs: /{etc,usr/share}/pki/trust/ has more than the 'anchors' subdirectory
• crypoto: allow reading /etc/gcrypt/hwf.deny

I propose this patch for 3.0..master (2.13 doesn't have abstractions/crypto).