SERVER-7455 SERVER-7961 x.509 authentication and keyfile replacement

Basic support for x.509 authentication of clients and for internal
x.509 authentication of cluster members.