Support client certificates, add cert validation