In God we trust - all others must present valid X.509 certificates