(PDB-813) Upgrade trapperkeeper, and move certificate-whitelist

This patch upgrades trapperkeeper, and the jetty component to the latest
revision. All lines of this patch are attributable to getting this to
work.

The major change was the change to certificate-whitelist, which is
not supported in trapperkeeper-webserver-jetty9 so we had to intercept
the configuration item, deprecate it and move it to the [global] section
so we could do this work ourselves.

Signed-off-by: Ken Barber <ken@bob.sh>
Done + added basic schema validation (it was missing before).