Add HKPS support.

This adds new options for serving over TLS (i.e. HKPS) alongside or instead of plain HTTP.

If this approach is amenable, I'll follow on with a commit that adds documentation / tests.
It should only check for a TLS certificate and key if an HTTPS address was provided, right?