Add mutual TLS support for RPC

The RPC server should allow optionally enabling mutual TLS as 1st class authentication.  If enabled, a client cert may provide the user's identity or fallback to kerberos or token.  Essentially the placeholder CERTIFICATE authentication method will be implemented and offered as an authentication method during connection negotiation.