basically we need to check that x509 auth works with tools via the comman line options and that there isn't any case where we're requiring flags (like password, which don't apply to x509) when we shouldn't be.