Private key and certificates on repo

[sevvalboylu]

key.pem and cert.pem files are read from files that are publicly available. io/shared/resources directory contains files that should be private (or better yet, env variables?)

[mpilquist]

Those files are on used for unit tests only and are part of the test class path, not included in any built artifact. With that said, I'd welcome a PR that just generated ephemeral keys/certs at test startup instead of relying on these test supporting files being part of the source tree.