Tests verify: mTLS proxy works with valid client cert, mTLS rejects connections without client cert, HTTP auth plugin receives client_cn, client_san, client_cert_fingerprint via PeerCert context propagation.
Tests verify: mTLS proxy works with valid client cert, mTLS rejects connections without client cert, HTTP auth plugin receives client_cn, client_san, client_cert_fingerprint via PeerCert context propagation.