NOTE

catgirl(1) depends on the openssl(1) binary for certificate
generation, but it's not listed as a runtime dependency.