Only accept a client certificate if the server requests