root/olares3: links for kw-client-auth-entrypoints