Add some basic smoke tests for wrapTLSclient.

Check the success case, and check that we reject a self-signed
certificate.