#24: allow specification of own PKIX truststore for client TLS
connections.