[Fixes #7 #74035706] Switch to TLS for backends

Enable TLS on backends.

I'm interested in opinions on the last commit with makes TLS mandatory and introduces stunnel to the mock VM.

This appears to make the tests slower to run against the real CDN provider, but they don't appear to be any more broken: https://github.gds/gist/dancarley/267