Add TLS supported rsyslog forwarding

This is a cleanup and squash of #475. Linking due to the existing discussion there which heavily influenced this branch.

@dlundquist @craigtracey @troy Please take a look when you can, and let me know if there is anything else you have thoughts/comments on.
Can we include a comment above certificate body, but within the value here indicating this is the BBG CA certificate?