WithOptionalAuthentication creates a handler that authenticates a request if a ClientCert is presented but passes through to the next handler if one is not.