Where there is no peer certificate the CLIENT-CERT mechanism should report that there is no authentication in progress instead of throwing an Exception to give other mechanisms an opportunity to authenticate.