allow empty names to delete all client certs