Allow DOCKER_TLS_CERTDIR to be empty.

Won't always be passed, and won't always be needed.