Insane that they're dropping client certificates for authentication. Reading the linked post, it's because Google wants them to be separate PKIs and forced the change in their root program.

They aren't used much, but they are a neat solution. Google forcing this change just means there's even more overhead when updating certs in a larger project.