#3256 made presence of x509 nginx headers mandatory