private AuthenticationFailedException newException(final String message, final Exception cause) {
    final String fullMessage =
        "PKCSAuthenticator: Authentication of client failed due to: " + message;
    if (cause != null) {
      return new AuthenticationFailedException(fullMessage, cause);
    } else {
      return new AuthenticationFailedException(fullMessage);
    }
  }
An implementation of {@link Authenticator} that uses PKCS.
geode-dunit/src/main/java/org/apache/geode/security/templates/PKCSAuthenticator.java