Add TLS support

Waddell isn't in dns and we connect by ip.  Using the server name here allows us to use the same certificate for all waddell servers, irrespective of ip.

As you point out, this is all tunneled, so blocking isn't a consideration.