[jiveturkey]

Oh lord no. He's not wrong about SSO tears at the seams (even though he gets lots of finicky details wrong), but client certs are decidedly not the solution.