Refine tls logic for shellInit

Right now shellinit relies on pem files existence when decides about setting `DOCKER_TLS_VERIFY` and `DOCKER_CERT_PATH`.

checking `--tlsverify` option at server side is more reliable.