Add ip-based client certificate authentication to https servers

Until there's a standard mechanism for reverse-dns lookups in vibe, I don't know how to handle the peer_name argument.

This should at least enable ip-based subjectAltNames to be appropriately verified.