o Add client certificate authentication. Closes #3376.