Initial support of X.509 client certificates

I asked around on IRC to no avail, so here appears to be initial support for using X.509 client certificates. Yes, it's four lines. Yes, I have no documentation. How should this be best documented? How should these values be accessed? Personally I'm content with them just being available as environment variables.