Avoid java TLS problems by requiring all OMERO.server to have a certificate (since they probably have one for OMERO.web this shouldn't be too much work).

Change the omero.client `--insecure` flag to mean "don't verify certificates (e.g. self-signed server cert") instead of 4063 vs 4064.