This will allow clients to stop making requests to an unhealthy SA, and will also allow automatically stopping an SA that is unhealthy for long enough.

-----(edit by @beautifulentropy)-----

Prerequisites

• Get Consul grpc health checking working in dev docker
  • Communicate findings to SRE and determine if they're unblocked
• File PR fixing Consul docs to show that tls_server_name and tls_skip_verify are supported in grpc checks
• File PR adding support for tls_server_name in Nomad http and grpc service>check stanzas and fixing docs to indicate that skip_verify is supported in grpc checks.