[Dovecot] Authentication using only TLS client certificates

Hi!

I'd like to configure dovecot to use only TLS client certificates for authentication. After the user presented a client certificate and that certificate was verified, no password-based authentication should be necessary anymore.

Is this currently possible? Or would this require support for the SASL EXTERNAL mechanism?

Regards, Martin