write_http: expose more TLS options

* adds support for client certificate authentication
* allows setting CAPath
* allows forcing a specific SSL/TLS version