Ah, okay.  That makes sense.  Should we file a separate JIRA ticket to allow client cert / key to not be required for the PEM path in `clj-http-client`.  Not sure if we need that but the flexibility might be nice.