NewConfig returns a new Config for the given options.

WithProxyAuthHeaders does client cert termination by extracting the user and groups and passing them through access headers to the shard.

PathMapping describes how to route traffic from a path to a backend server.