test: server can require client certificate in TLS handshake