Add support to product certs in auth middleware

[rambo]

check the manifest for expected product CNs and always grant all privileges to them