add the ability to request client certificates

[raffaelespazzoli]

these certificates can then be used for mutual auth.