This should also check that AUTH_USE_MIT_CERTIFICATES is set.  And it should not need a default value of ''.