server: refuse secure connection if client certificate is not provided