    <Location "/keymanager">
        SSLVerifyClient require
        SSLOptions +StdEnvVars
        # SSLOptions +StdEnvVars +ExportCertData
    </Location>
    <Location "/keymanager/keys.xml">
        Deny from all
    </Location>
