Add support for client cert auth (need only, not want) and configurable trust store