which option should be used with the TLSVerifyClient directive to ask the client for a valid certificate in order to proceed normally?

When configuring LDAP to use certificates, which option should be used with the TLSVerifyClient
directive to ask the client for a valid certificate in order to proceed normally?

A.
never

B.
allow

C.
try

D.
demand