When can we start seeing regular services using client authentication using asymmetric keys? You only really need 1 keypair per identity, you can store it locally on your machine, and use a single password to encrypt the private key.