Expanding client auth

At some point we should either detail these more or at least link to upstream documentation.