Also: reset/change selected client certificate without restarting.