Hey Casie,
I just checked, and it looks as if we added the documentation later on, but using those settings should be possible in watcher 1.0 as well.
Also shield was just used as an example to use PKI based auth in the docs. You can use the watcher http client to connect to any PKI based auth as long as the other side is actually checking that cert like shield does.
If you have watcher running on a cluster, that settings and stores needs to be configured and available on all of the nodes.
--Alex