move dnsclient config to clientcert