Add hooker interface

This is not required at the moment, but a warning will be thrown in subsequent
releases.
Document the hooks option
Enable SNI on fsockopen if possible
Document the verify/verifyname parameters
Bundle default cacert.pem

Passing in `verify => true` will still use the system certificates, but this is
a better default.
Set context options rather reinitialising