ClientCertificateCaptureTrustManagerFactory
Trust manager for inbound client certificate capture on proxy listener.
The authenticated flow is enforced by downstream token/JWT validation. Here we allow presented client certificates so the proxy can forward certificate binding data to backend without CA-chain requirements.