uses GNU getopt with BSDish-licensed code from OpenSSL
