re-enable auth and cert stuff.
config allowed certs directory where client pubkeys are installed.