hostapd: introduce a client_cert option which is passed on to wpa_supplicant (#8876)