It didn't make sense to me for this to be here.  options.ssl_client_cert didn't even exist.  If we put the certificate configs here it could allow people to do Basic + X509 or token + X509.  I don't think I've heard that requirement so I made X509 another core_auth method.