Client auth is explained in more details in the spec: <a href="https:&#x2F;&#x2F;github.com&#x2F;aerofs&#x2F;ssmp" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;aerofs&#x2F;ssmp</a><p>Our most common use case is client certificates but there are provisions for alternate auth schemes.