just switch client auth mode if both certfile/keyfile specified