The authentication requires all users to sign the requests using an X.509 certificate. Type SERVICE_CONSUMPTION_CONSTRAINT