Convert to using UID field in certificates to store client ids; change naming 'auth' to 'uid'
Add user removal command; uid becomes user