Refactor: libcrmcommon: pcmk__new_tls_session can take a cert cred type.

No other changes for the moment - just allow taking this type and print
it out in the error message.