[Meta issue] Security

[fehguy]

This is a meta issue of security-related tickets. Please don't add comments to it, but create new tickets for issues that don't already exist and link to this one.

[Bonscho]

SSL client certificate authentication is missing in the list and would be definitively nice. We use it a lot for auth against API enspoints.

[webron]

@Bonscho - looks like we missed the description in this issue which exists in the other meta issues (just added it). Please open a ticket instead of commenting here.

[handrews]

This meta-issue has served its purpose, and any remaining items are being tracked under new labeling now.