Add X509 attributes from the client certificate
Do the lookups only for client certificates