Client Cert for Authn

Identify clients via their TLS certs and a specified root set.