Support for encrypted certificate private keys

Make sure that the certificates themselves are not left open.  If CouchBase can accept a certificate store like a JKS file, we can put unencrypted certs in them.  As of today, we have to run openssl and un-encode the certs before providing to CouchBase.