test/tls: proceed only if client cert exists