TLS support

[cbdevnet]

Currently only possible when proxying through a TLS-terminating web server.

Since gnutls is already a dependency, this should not require any more.