code: private void saveClientCertSettings(){
  
          if (getBoolean(PERSIST_CLIENT_CERT, false)){
              logger.warn("Saving Client Certificate settings: password will be found in config");
              setUseClientCert(getBoolean(USE_CLIENT_CERT, false));
              setClientCertLocation(getString(CLIENT_CERT_LOCATION, ""));
              setClientCertPassword(getString(CLIENT_CERT_PASSWORD, ""));
              setClientCertIndex(getInt(CLIENT_CERT_INDEX, 0));
  
          } else {
              // Default to clear settings
              setUseClientCert(false);
              setClientCertLocation("");
              setClientCertPassword("");
              setClientCertIndex(0);
          }
      }
docs: Saves the client cert settings if the flag is set explicitly.
  Only works for the CLI currently.