Reading through #295, we clearly "assume windows", however CAC can be used in linux, and other methods of certificate auth than smart cards do exist. If we desired to keep this lower level authentication mechanism in place we should utilize the Service Loader or ServerAnnotations to pass the buck to a component that's specific to that implementation and have our client only directly know that it needs a certificate.
Reading through #295, we clearly "assume windows", however CAC can be used in linux, and other methods of certificate auth than smart cards do exist. If we desired to keep this lower level authentication mechanism in place we should utilize the Service Loader or ServerAnnotations to pass the buck to a component that's specific to that implementation and have our client only directly know that it needs a certificate.