`ServerTransportSecurityValidator` accepts an accessor function for header

[Kehrlann]

Follow-up to #771 .

Current implementation of ServerTransportSecurityValidator requests that all headers are passed in as a map. This is inefficient, and header access becomes case-sensitive.

Introduce a validateHeaders(Function<String, List<String>> headerAccessor) instead.