Fix CA trust store custom entries. Fixes #15440
certctl rehash behavior changed, so we need to write the CA files out
differently now so it picks them up.
Disallow hostnames in Kea NTP. Fixes #14991
* If they are in the config.xml data already, do not write them into
the Kea configuration.
* Do not allow the user to enter them in the GUI
Instrument the upgrade JSON data with more information about errors and failures.
Now, with the proper return code, instead of presenting no data to the user when
the pfSense-upgrade is busy (running in background), explain properly what is
happening.
Catch/handle some HTTP errors. Implements #15322
* Catch 50x errors, even from PHP FPM, so users don't end up with a
blank white screen if an error happens too early in processing.
* Catch 404 errros.
* Handle both with static pages since PHP-FPM may have an issue of its
own, so don't loop back there.
Add self-service user pw mgr to menu/tab. Issue #15266
No need to hide this since it's convenient and works well.
While here, make all tab arrays in the user manager consistent.