feat: implement peer validation

For whatever reason, the connected SSL endpoint only has the IP address and not the FQDN. We pass in the expected hostname directly and let the rest of the verification happen normally.