Chef Infra & CyberArk integration using client cert authentication

Hi fellow Chefs !!!

Secrets management time ....

Is anyone using Chef Infra (config) and CyberArk for secrets management using client cert authentication?

Currently the CyberArk supermarket cookbook doesn't support client cert authentication ... only username / password which we cannot use. Potentially using CredentialRetriever PowerShell module could work using cert authentication. Chef cookbook recipe could then just call this ...

As Chef and CyberArk are well known in their respective fields of Configuration Management and Secret Management wondered how others have tackled this?

We're probably over engineering this - fellow Chefs ... help! Others must be using this combo successfully and easily ...

Many thanks

David