s1653: first attempts with x509userproxy