Refactor start() into two methods start() and startSecure().

Allow client code to pass a PFX filename instead of options object to startSecure().
Handle non-secure and secure ports correctly in stop().