controller: Add controller client documentation.

Not sure all of these are detailed enough.
"but specifies a TLS pin"