mod_s2s_auth_certs: Split PKIX based certificate checking from mod_s2s into new plugin