Add support for an insecure catch-all handler.
Add support for an insecure catch-all handler.

InsecureHandler will get invoked for any non-TLS request that doesn't
match a host for which we have a certificate. If not provided, such
requests gets a 404.

danderson/tlswrapper