For PSD2 compliance, apps must be able to identify themselves with client TLS certificates against the API. Therefore, client cert file has to be configurable.