'Access Denied' when Cloud enabled agents (or internal ones) try to access GetClientCertificates.aspx and GetClientCertificatesMig.aspx