Add user parameter to client certificate logic

[fionera]

prepare logic to allow more than just root as user for a client secret

Checklist

• [x] I have added these changes to the changelog (or it's not applicable).

[cockroach-teamcity]

All committers have signed the CLA.