This adds support for smartcard authentication with basic X.509
certificates. NGINX needs to be setup in a way to run the same server
context on separate port requesting the client side certificate. Another
limitation is that the email address must be a part of the Common-Name
attribute.