website: Document client auth for TLS. Fixes #255.