Jarv/config refactor wip

Yeah, these are needed for SSL client authentication, and defaulted here.  They are unused if the `AUTH_USE_CERTIFICATES` FEATURE flag isn't set so it is harmless.  It probably should have been added to aws.py, but looks like it should now be settable with the new yaml config without a specific load key now.