SERVER-7455 SERVER-7961 x.509 authentication and keyfile replacement

Basic support for x.509 authentication of clients and for internal
x.509 authentication of cluster members.
SERVER-7961 Not calling doSSLHandshake for non-SSL webserver