Use tls_choose_sigalg for client auth.