website/docs: document client cert