add ca-file and client-cert-url flags to menshen section of the config

with menshen!17 (merged) Menshen's api changed. It became mandatory to set the CA cert used for the upstream API communication to a lillipad v3 deployment. Morever the URL to fetch VPN client certificates need to be set explicitely. This MR adapts jnk accordingly.

closes !11 (merged)