We don't need to set a certificate on the client.
Only allow one session per user, at a time.