move ssl/clientcerts to ssl/auto-clientcerts