Add identity-based TLS auth and UI for client/daemon auth

Add identity-based TLS authentication and use public keys to authenticate access.
This is an implementation of the proposal from #7667.

FSNotify support has not been added to detect changes to authorized keys but may be added in a follow up PR.

Related to scope, either err needs to be created beforehand and not use `:=` or do how it is coded.  Can update it to explicitly create err to reduce the number of variables created.