doveadm service: verify client cert

Hello,

I want to open a socket for connecting doveadm using tcps. I do the following:

service doveadm {
    inet_listener {
        port = 5001
        ssl = yes
    }
}

At the same time, I would like to verify client certificates for connections goes to port 5001. I am trying to do the following, but it doesn't work:

protocol doveadm {
    ssl_require_crl = yes
    ssl_verify_client_cert = yes
}

How could I achieve required behavior?