Use Client certs, not server certs