Extban "S:" matching against SSL cert fingerprint

This is probably mostly useful in combination with m_autoop to
automatically make someone with a given SSL client certificate operator
of a channel, not for banning people as such, unless the network
mandates client certificates anyway.