Restricted yum (and eventually apt) repos, secured with client certificates