Implement TLS

This issue is for adding a sane default when we encounter an 'amqps://' scheme.

When client certificate validation plus the EXTERNAL SASL mechanism are required, then it is up to the client to string together a meaningful connection handshake.

The default behavior will likely be to require server certificate chain validation.