libfreerdp-core: add external certificate management, pass X509 PEM certificate through client callback