add support for certificate-based authentication