2a85755
Add minimal client configuration for when we eventually get to PKINIT Also move the unenroll to clients only. This isn't necessary on the master ticket 53