rename the SSL certificate related arguments

Calling it certifcate and private_key makes it more apparent what we're copying
about.

This is probably not the last change to this as there's the disjunct
from the underlying setting `plugin.ssl_client_private` and the
parameter name `certificate` to worry about at some point in the future.