verify Ziti's server cert

[qrkourier]

zrok should verify Ziti's server certificate before transmitting the Ziti login password

[qrkourier]

A new zrok controller config directive like ca_certs or tls_trust_bundle would be great. It could accept a PEM bundle as a string or file path or both.

[qrkourier]

While working my way back to this, I've mitigated the risk in my zrok instances with two approaches in this order:

1. two containers (sidecar pattern) or processes sharing a network interface and communicating exclusively via IPC over IP on the loopback interface (ziti mgmt API is not exposed nor published)
2. two containers in an isolated bridge network communicating exclusively at layer 2 (LAN) (ziti mgmt API is exposed but not published)