Add client authentication to the remote signer config

[jclapis]

This addresses #405 by adding some extra (optional) fields for a certificate file path and key file path to the SignerType::Remote config.

NOTE: This also changes reqwest to use rustls-tls instead of native-tls so it doesn't depend on OpenSSL. We can look at removing it entirely down the line.