Add TLS supported rsyslog forwarding

This is a cleanup and squash of #475. Linking due to the existing discussion there which heavily influenced this branch.

@dlundquist @craigtracey @troy Please take a look when you can, and let me know if there is anything else you have thoughts/comments on.
I'm not complaining if you want to, ah, standardize the destination hostname too ;D