More code to hook into client certificates as they arrive #640