talk about SSLVerifyClient required vs. optional