CN and organization customizable via environment variables, and certificate
authentication is now supported