jp7/cu130: links for kw-client-auth