Make client certificate verification configurable