Add support for passing in custom certificate keypairs

[adammw]

To enable out-of-bound certificate management, we would like to pass in paths to keypairs for etcd-manager and etcd to use rather than it requiring a CA to self-sign it's own certificates.