[stunnel-users] External validation of client certificates