Always associate client cert data, even if servlet auth-mechanism is not...

... configured to CLIENT_CERT