Certificate inspection? May not be possible on pure web? WebAuthn extension? May be quite some time coming Something else?