The `addCA` and `verify-client-cert` options must be used together or not at all.
Client certificate verification happens automatically if CA certificates are added.

Q: Why should you need to ask for client cert verification separately?
A: You shouldn't.  That was confusing and could lead to misconfiguration.