Add Client Cert Auth to Lumberjack input.

Matches with Logstash-forwarder/pull/243

Three options, CA to match, if the system CAs are to be trusted, and if
we want to verify the clients signer. Three options because there may
be a case where someone wants to trust any client certs signed by the
system CAs.