Re-introduced Client for client-initiated workflows, and updated access control for pinger
PKI adapted to both CI and SI workflows
Small tweaks on DN extraction from certificates