anchor.diff:  ----
   public class PkiCluster : CertgenCaCluster
   {
  -    protected override ConnectionSettings Authenticate(ConnectionSettings s) => s <1>
  +    protected override ConnectionSettings Authenticate(ConnectionSettings s) => s <1>
           .ClientCertificate(new X509Certificate2(this.Node.FileSystem.ClientCertificate));
   
       //hide
  
positive.code: {
      protected override ConnectionSettings ConnectionSettings(ConnectionSettings s) => s
          .ServerCertificateValidationCallback((o, certificate, chain, errors) => false)
          .ServerCertificateValidationCallback(CertificateValidations.DenyAll); <1>
  }
  ----
  <1> synonymous with the previous lambda expression
  
negative.code: ==== Client Certificates
  
  X-Pack also allows you to configure a {xpack_current}/pki-realm.html[PKI realm] to enable user authentication
  through client certificates. The {ref_current}/certutil.html[+certutil+ tool] included with X-Pack allows you to
  generate client certificates as well and assign the distinguished name (DN) of the
  certificate to a user with a certain role.
  
  