add account validation bus and built-in event handler to prevent client certificate reuse across accounts