Wait, what part of the whole login flow involves the browser even contemplating whether it trusts its user’s client cert?