mTLS: When certificate authentication is done wrong. I'm doing mutual TLS for some customers at work, it's a simple idea that can have complicated implementations, and not everyone groks how it should work in the first place.