Allow custom TLS options

* Option `secure` can now be a hash of options to be passed to `tls.connect`
* If `secure` is simply set to `true`, default TLS option `rejectUnauthorized` is set to `false` to force pre-0.9.2 behavior (fixing #181)