modular auth, part 4: split out sslclientcert handler into a module.