HTTPS-with-validated-cert option

[evanp]

For some applications, it's really important to make sure the responding host is authentic. We should support options that only use HTTPS and validate the cert.