Actually use the suggested name correctly (`tls-cert-auth-policy` -> `tls-client-auth-policy`)