Use a TraversalContext to ensure that X.509 certificates are only validated once per item.