Design and implement improved algorithm for choosing consensus method

[nickm]

Our current algorithm for picking a consenus method is, "Pick the highest method supported by more than 2/3 of the authorities currently voting." This can sometimes result in an insufficiently signed consensus. Instead, it should be something like, "Pick the highest method supported by more than 2/3 of the authorities currently voting, UNLESS the number of authorities supporting that method is less than the threshold needed to sign a valid consensus. In that case, pick the highest method supported by enough authorities to sign a valid consensus."

Alternatively, the algorithm could be something like, "Pick the highest method supported by enough authorities to sign a valid consensus", which I believe is mathematically identical to the above (more obviously safe) formulation.

This change would make some attacks harder for a hostile authority, and some attacks easier. It needs a design proposal and some analysis.

[dgoulet]

Turns out that tor-auth is for directory authority so make it clearer with tor-dirauth

[teor]

Set all open tickets without a severity to "Normal"