I am also bummed out by this change. I really like the idea of using a certificate as a single identity for a service. Things could connect to a service using n

I am also bummed out by this change. I really like the idea of using a certificate as a single identity for a service. Things could connect to a service using normal TLS but the service could also authenticate itself to other services using mTLS. After this change I'd need a separate certificate for the service to use for mTLS.