Add ability for client to retrieve/install CA certificate, and to force TLS on client
initial attempt at quick documentation