etcdctl: add environment support to certs args