Updated bae-api to default to false for client cert auth.
(The other two jars may not have changed, but updating because this trio works)