he client
       to present a valid (trusted) SSL certificate, while
       <code class="literal">verify-full</code> additionally enforces that the
       <code class="literal">cn</code> (Common Name) in the certificate matches
       the username or an applicable mapping.
       This behavior is similar to the <code class="literal">cert</code> authentication
       method (see <a class="xref" href="auth-cert.html" title="21.12. Certificate Authentication">Section 21.12</a>) but enables pairing
       the