Tlsclients
tlsclients
man qmail-smtpd excerpt:
A list of email addresses. When relay rules would reject an incoming messages, qmail-smtpd can allow it if the client presents a certificate that can be verified against the CA list in clientca.pem and the certificate email address is in tlsclients.