It's an important problem but how does this differ from TLS client certificates?