schema: new action type, clientcert.update_client_cert