Passport.js strategy for PKI client certificate authentication