Use the new (2.1.0+) GnuTLS APIs to obtain private keys.

This allows loading a private key from a PKCS #11 or a TPM URL.