Fix client certificate authentication

Unless I'm missing something, we must be able to provide two different files: a pem file and a key file.