Do not allow negative serial numbers
Use matching client key name (same as in vpn config)