I added CLIENT_CN:
configuration option to use commonName instead of emailAddress to identify user. I think with the DISABLE_SSL
option it makes sense because TLS connection can be terminated on load balancer and certificates do not have to be created specialy for Jetconf with unique emailAddress.