We tried to use Client Certs at LogNormal for API calls, but the problem is that if you enable Client Certs on an HTTP server, all requests will be asked for a cert, which, on a browser, pops up a scary &quot;Select certificate&quot; message.  Since we used the same nginx boxes to front all requests, and routed them to appropriate servers on the back end, we couldn&#x27;t proceed.