code: func NewVerifier(opts x509.VerifyOptions, auth authenticator.Request, allowedCommonNames sets.String) authenticator.Request {
  	return &Verifier{opts, auth, allowedCommonNames}
  }
docs: // NewVerifier create a request.Authenticator by verifying a client cert on the request, then delegating to the wrapped auth