Require a single smartcard certificate to be chosen and define a callback to choose when more than one is available.