Configuring client certificate authentication in Spring Security