Client certs (and possibly cipher suites) needs to be per connection.
—Reply to this email directly or view it on GitHub.