Re: submission proxy -- where to config/present client cert?