Do the lookups only for client certificates