HTTPS transport, revised

This is a revised version of pull request #31, adding a couple of interoperability fixes, use of certificate anchors and hostname verification, self-tests, and some documentation.

It's been tested against a Windows Server 2012 server and the python-based server from https://github.com/npmccallum/kdcproxy with patches from its pull requests 5, 6, and 7 added.