It would be nice if you could use client certificates on ssl connections.
While only very ircds allow it for opers to authenticate, it could use as a good way to authenticate on a bouncer.