Where is the check now, that the client certificate allows operations only on itself but no other consumers?