Implement cert-based authentication strategy

[j987987]

Implement a cert-based authentication strategy for unfetter-discover-api and unfetter-socket-server.

[ghost]

Modified some user schema structure. Added a new strategy for this, and auth structure change to support it. Will need to genericize it some more to provide a pluggable "post-certificate validation" process that is not high-side specific.