Move connection/capabilities settings routines to QgsSslPkiSettings; add WFS PKI support