Introduce /openscap/arf/:policy/:date API

At this stage it just verifies the client certificate.