Goodbye self-signing certs

Calling this 2.0 because we're breaking backwards compatibility. You can no longer sign your own requests.

Didn't make this configurable to try to keep this change simple. Thanks @Arvanaghi for the PR.