TlsOptions allows users to provide paths to certain certificates, but they're currently accepted as String. We should instead use PathBuf from the standard library to allow a more ergonomic API. This is in line with the C-CUSTOM-TYPE Rust API guideline.