Allow tls over ssh tunnel

We are using Maestro for an internal project. We cannot simply expose docker over a tcp connection (that's against internal policy) so we opted for the ssh tunnel. However, we also wanted to be able to verify the client's identity via tls. This change allows us to do both.