If use_ssl_authentication and SSL_CLIENT_S_DN_CN are set then the CN should override REMOTE_USER