Improve setup of SSLContexts

Only X509DirectGrantTokenRequestBuilder and CWMSAAA actually require setting up the client certificate.

To get #280 behaving sanely, especially during a test with hec-client-server, I had to rather drastically set SSL* to null as it needed a value but wasn't used, several interfaces also checked for null which somewhat got in the way.