[tor-commits] [tor/release-0.3.3] Mark cert_matches_key as not-intrusive; fix stretch compilation.