Add certificates-from-pem-file, client passes this to start-tls

certificates-from-pem-file reads and parses certificates from a PEM
file. The x509 library now keeps the bytevector representation of
certificates so that clients don't need to keep track of whether they
should pass a bytevector or a parsed certificate.