config should accept tls-client-cert

no way to specify TLS client certificate via `Set` (aka `--reader-opt`)
Can you document these in comments somewhere in the Config struct which is where we documented all the rest?