gnutls-cli-debug should emit DHE params to stdout/stderr, but not to debug-dh.out unless explicitly requested
I note that gnutls-cli-debug --verbose today emits the server's DHE params to a statically-named file (debug-dh.out).
This is a potentially dangerous change, because it's conceivable that someone is in the habit of running gnutls-cli-debug --verbose from a directory where arbitrary file creation could have side effects.
I think DHE params should continue to go to stdout or stderr, though saving them to a file if the user supplies an extra --dhparams-out argument would also be reasonable.