remove unused client certs