Middleware checks each request for authentication.

New creates an authenticator based on the provided server configuration.

RequestInfo returns information about the calling user.

CertificateAuth requires all callers have a client certificate that either has its fingerprint explicitly configured with access, or is signed by a configured CA.