1) add environment variables DUMP_DB, ABAC_CN.
ABAC_CN will switch to using CNs for keyid insead of SHAs
2) add/modified couple of doc files.