Delay the next request in etcd watch when there's an error.

This fixes #329.
Add a function to read public keys from PEM files.
Convert client/ct.cc to use ReadPublicKey.