Client verification of server certificates

Have the client cache and verify server certificates.

At 'lxc remote add', display the server cert fingerprint to the user for ack/nack.  If acked, store under ~/.config/lxd/servercerts/$remote.cert

At lxd.Client.get(), verify that the tls certificate on the wire is the same as the one cached on disk.