fixed PKI.sign.tar() and PKI.verify.tar() mis-detecting
tar-balls with xz (lzma) compression. Also the detection
no longer fails in UTF-8 locales on systems where R
attempts to interpret the magic bytes as UTF-8. (#29)

added PKI.genpass() for random password generation