Barrier client now sends certificate that the server can verify.