I\'ve got keycloak exposed to internet by Ambassador as api gw. Everything runs on a kubernetes cluster. For a mobile application I need to implement x509 authentication and