Add the ability to auth via certs without storing them in etcd secret

Add the ability to auth via certs without storing them in etcd secret #2680