rejigged serviceclient to allow the x509 cert to not be added to the store as localmachine