Refactor cert pinning to only pin public keys; remove legacy HTTP transport.