Certificate / public key pinning

[paulyoung]

We should provide the info needed to do this.

For example, from Twitter: https://dev.twitter.com/overview/api/ssl