Docker动态配置和客户端证书

Question

我正在使用Traefik 2.1.6，这是我的docker-compose.yaml：

version: "3.7"
services:
  whoami:
    image: emilevauge/whoami
    restart: unless-stopped
    networks:
      - proxy

    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"

      - "traefik.tls.options.default.clientAuth.clientAuthType=RequireAndVerifyClientCert"
      - "traefik.tls.options.default.clientAuth.caFiles=/etc/traefik/cert/cloudflare.crt"

      - "traefik.http.routers.whoami.rule=Host(`example.com`)"
      - "traefik.http.routers.whoami.tls=true"
      - "traefik.http.routers.whoami.tls.options=default"

      - "traefik.http.middlewares.whoami_tls.forwardauth.tls.cert=/etc/traefik/cert/aaa.crt"
      - "traefik.http.middlewares.whoami_tls.forwardauth.tls.key=/etc/traefik/cert/aaa.key"
      - "traefik.http.middlewares.whoami_compress.compress=true"

    expose:
      - 80

networks:
  proxy:
    external: true

为什么没有客户端证书就可以连接？如何运作？