This is my observation as well. Smart people, e.g. people with PhDs or working on them, just by and large do not understand key pairs. They have terrible trouble with ssh keys, and I am sure would have as much or more trouble with client certificates.<p>It has to be something that is totally automated, and can&#x27;t rely on copying or uploading or in any way touching public keys as a manual step.