Account recovery for client certificate generation

see similar topic:

the drop off TLS Client Authentication was announced more than a year ago.