Only requiring client certificate authentication for some application resources while still using TLS/SSL for the rest of the application

Issue

• When using verify-client='want' in the JBossWeb configuration, the certificate is requested when a non-protected url is accessed. However, I want that the client certificate be requested only when the user tries to access a secured resource.
• Securing only some pages in my application with client certificate authentication while still using TLS/SSL for the entire application