Figure out the API list that need for this tool

[JaySon-Huang]

We may disable the TiFlash HTTP port inherited from ClickHouse. We need an API list that this tool needs and make them a formal API from the TiFlash server.

[fuzhe1989]

how to do authentication?

[JaySon-Huang]

@fuzhe1989
Seems tikv-ctl/pd-ctl follow this rule:
If users enable TLS for TiDB cluster, then we should obey the rules of TLS authentication.
if TLS is not enabled, then we don't do authentication.