-clientcert command-line option