Store a cert->account map and use it for SASL EXTERNAL and certfp auth