The intention is that users explicitly provide the username for X509 auth.
Currently the driver ignores it, and pulls it out from the provided pem file, which has to be set via mongoc_client_set_ssl_opts().

phongo however doesn't use the mongoc ssl wrapper, and therefore never calls that function.

mongoc needs to first check if a username was provided, and then fallback on extracting the subject from the cert.