Add Client Cert Auth to Lumberjack input.

Matches with https://github.com/elasticsearch/logstash-forwarder/pull/243

Three options, CA to match, if the system CAs are to be trusted, and if
we want to verify the clients signer. Three options because there may
be a case where someone wants to trust any client certs signed by the
system CAs.