Shouldn't require certs to be stored in filesystem

[snej]

The New() function takes filesystem paths to the certificate and private key files. That's too limiting — the server may not have filesystem storage available, or the private key may be considered too sensitive so it might be kept in a Keychain-like store or an LDAP server.

Probably the most flexible way to do this would be for New() to take a tls.Certificate as a parameter, and let the caller load the certificate by calling either LoadX509KeyPair or X509KeyPair, the latter of which takes the components as raw byte arrays.

[googollee]

Yep. I'll change it.