asClientCertificateTlsAuthOrNull