Beyond SSL client cert authentication: authorization | Hacker News Reader