(SERVER-18) Add x-client-dn and x-client-verify support

Maybe should say *DN* here instead of *CN* - although a *CN* is expected to be in the *DN*...