Add HKPS support.

This adds new options for serving over TLS (i.e. HKPS) alongside or instead of plain HTTP.

If this approach is amenable, I'll follow on with a commit that adds documentation / tests.
err = fmt.Errorf(...)