change the https conduit selector to check the configuration of the
client conduit.  If it has a key manager, then we choose the alternative
that requires a client certificate.