code: func (t *TestTLSServer) NewClientFromWebSession(sess services.WebSession) (*Client, error) {
  	tlsConfig, err := t.Identity.TLSConfig(t.AuthServer.CipherSuites)
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  	tlsCert, err := tls.X509KeyPair(sess.GetTLSCert(), sess.GetPriv())
  	if err != nil {
  		return nil, trace.Wrap(err, "failed to parse TLS cert and key")
  	}
  	tlsConfig.Certificates = []tls.Certificate{tlsCert}
  	addrs := []utils.NetAddr{utils.FromAddr(t.Listener.Addr())}
  	return NewTLSClient(ClientConfig{Addrs: addrs, TLS: tlsConfig})
  }
docs: // NewClientFromWebSession returns new authenticated client from web session