fixes #7822 - forbid HTTPS requests with no client SSL certificate