Beyond SSL client cert authentication: authorization(spootnik.org)

http://spootnik.org/entries/2014/01/25_beyond-ssl-client-cert-authentication-authorization.html