Add missing const qualifier on SSL_METHOD* vars.
afserver: support per-realm CA-certificate settings

This makes it possible to have different CA certificates for different realms,
or certificate auth for only some realms and password auth for others.