Explaining client authentication