3rd party CA without --auth is hard to diagnose

[dovholuknf]

I created a 3rd party CA but neglected to supply --auth when creating the CA. I then made a cert/key issued by that CA and tried to use it for auth. With the benefit of hindsight, clearly that should not work.

It would have been extraordinarily helpful for a log message to be produced in the controller something like:

3rd party certificate detected on auth, but the matching CA is not marked for auth. Authentication failed

or you know, something like that