[WO-421] Expose socket.oncert

... to accomodate changes in tcp-socket
whiteout-io/tcp-socket#2