support for client authentication based on certs