Improve client certificate authentication

[ostrya]

• describe how to generate a client certificate on a PC and provision it to the app in readme
• for Android 4.3+ (sdk level 18+), implement generating a self-signed certificate on the device (which is guaranteed to be non-extractable) and exporting its public key to configure in the broker as trusted