httpcli: pass certifcates directly to NewCertPoolOpt
Created by: keegancsmith
This simplifies the call sites for this function and reduces the exported API. Additionally I want to be able to compose this function, but CAPool doesn't provide functionality for that.