Adds an option to retain only the SHA256 of a client certificate in memory and in the serialized session state.
Initial fork from f2d678e6e89b6508147086610e985d4e8416e867 (1.0.2 beta). (This change contains substantial changes from the original and effectively starts a new history.)