Revise ClientCertificateCredential

[chlowell]

• make password optional
• remove client_ prefix from ctor arguments
• remove send_certificate_chain option; keep AZURE_CLIENT_SEND_CERTIFICATE_CHAIN
• compute constant values e.g. x5c, x5t once, in ctor
• accept multiple scopes
• validate ctor args