How to establish a Client VPN Endpoint with certificate-based authentication?