[zokier]

Btw can step create client certs? That would reduce the need to use IID for anything else, even if it doesn't really resolve the underlying issues with IID

[mmalone]

Yep. That's my preferred solution, obviously ;)

Certs have "TLS Client Authentication" key use set by default.