New -force_pubkey option to x509 utility to supply a different public

key to the one in a request. This is useful for cases where the public
key cannot be used for signing e.g. DH.