Allow app to register additional trusted root/anchor SSL certs

If an app replicates with a server whose SSL certificate isn't signed by
a known CA, it can now register the cert (or its CA cert) with the
replicator so it will be treated as a trusted root.
Fixes couchbaselabs/TouchDB-iOS#171