Well, I've got something similar that I've implemented client side certs on - works well for our case, which is a private api where new clients are vetted befor

Well, I've got something similar that I've implemented client side certs on - works well for our case, which is a private api where new clients are vetted before they get to use the api.