SERVER-13945 Match x.509 cluster certs per attribute