GRANT SELECT, UPDATE (Title, start_date) ON test.Employee TO 'user1'@'domain1.com' IDENTIFIED BY 'pw1' REQUIRE SUBJECT 'test client cert.' AND ISSUER 'Test C.A.';