Bit of cleanup about now useless backward-compatibility.

So that it doesn't change every day.

So we remove the trailing /.

2.7 is not backward compatible and breaks import-list.

More logical. Also add comments.

s.r.cmmi 0.2.0 switched to buildout2-style, so we follow.
In the meantime, use a fixed target-list if it proper conditional
section is not supported.

This is still secure because we use HTTPS, then url is encrypted as well.

By don't creating the inituser file if it has already been done once.

disable FIPS explicitly, otherwise stunnel fails to start with the following output :

Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS
Reading configuration from file etc/stunnel.conf
FIPS_mode_set: F06D065: error:0F06D065:common libcrypto routines:FIPS_mode_set:fips mode not supported
Line 5: "[remote]": Failed to initialize SSL

so that responses without max-age will not be cached.