Accept certificate and private_key as strings

* make certificate_path and private_key_path explicitly relate to filenames
* maintains existing API client_cert and client_key options