# allow client certs
SSLVerifyClient optional_no_ca
SSLoptions +StdEnvVars +ExportCertData