Add TLS supported rsyslog forwarding

This is a cleanup and squash of #475. Linking due to the existing discussion there which heavily influenced this branch.

@dlundquist @craigtracey @troy Please take a look when you can, and let me know if there is anything else you have thoughts/comments on.
How so? I'm using this currently to detect within the template rendering whether or not to include the section. Thoughts on a better way to do that?