Require a CA Cert in a SecurityCreds object and via SSL

The initial version of security would allow a CA Certificate, but would not require one.  Now when using a `SecurityCreds` object you must supply a CA Cert.  This CA Cert option can now also be a list of cert files.

At the library level, OpenSSL will now verify the peer certificate (from the server) with the list of CA certs cached on the client.
Yes, that's old syntax I had have not yet updated.  On my docs branch it is correct.  I was just using the domain described in http://sphinx-doc.org/domains.html#the-python-domain.  Looks like you can set up a `default-domain`, which we could do, do use `:class:`, for example.