drop_unauthorized returns 444 when a client is not authorized as opposed to 403. It can be used with Client Certificate authorization.