add support for client-side cert and key

Following the model used for server CA, added pass-through support for providing a client-side cert and private key.  Both are suported by request, https and tls packages which are used downstream.  No tests covered the "ca" feature, and I didn't add any for cert/key.