@Override
    public void validate(Validation.Context ctx) {
        if (!ctx.deployState().isHosted()) return;
        ctx.model().getContainerClusters().forEach((clusterName, cluster) -> {
            for (var client : cluster.getClients()) {
                client.certificates().forEach(cert -> validateCertificate(clusterName, client.id(), cert, ctx::illegal, ctx.deployState()));
            }
        });
    }
Validates that trusted data plane certificates are valid

@author bjorncs
config-model/src/main/java/com/yahoo/vespa/model/application/validation/CloudClientsValidator.java