Use the new (3.1.0+) GnuTLS APIs to obtain private keys.

This allows loading a private key from a PKCS #11 or a TPM URL.