[minebreaker]

FAPI standardizes an OIDC extension for client authentication using mTLS, so I don't think there's anything wrong with it.