Feature: Client Based Authentication (CBA)

[Killom]

CBA would be a good addition for Proxy Manager. Just some thoughts:

Backbone could be something like step-ca for running a small footprint PKI (or just use openssl when everything is located on localhost/docker)
You then generate an root-CA and start to issue Client-Certs from there. You manage them with NPM's internal User Management.
Invalidating access would be possible trough CRL or maybe also OCSP (not sure if latter is necessary, since everything runs on localhost). nginx is CBA capable OOB

Then just enable/disable CBA per ProxyHost basis - or via Access List Management