User authentication using certificates {for accessing specific resources, e.g. using Kerberos tickets}