client/server: Added new 'strict' option which can be used
to force strict TLS/SSL certificate authorization (no self-signed, valid CA chain etc)