Use PEER_VERIFY during spec tests.

Also create a keystore with a cert signed by the Candlepin CA (and
describe how to do it so people can repeat the process).