> And I wouldn't call it 'really secure', I'd say it's just as secure as any other client side secret. Only if you store the cert in a file, but you can store

> And I wouldn't call it 'really secure', I'd say it's just as secure as any other client side secret. Only if you store the cert in a file, but you can store it on a smartcard (e.g. Yubikey) or a TPM.