CAcert: Client-certificates and SSO - the old-new thing