which option should be used with the TLSVerifyClient directive to ask the client for a valid certificate in order to proceed normally?

When configuring LDAP to use certificates, which option should be used with the TLSVerifyClient
directive to ask the client for a valid certificate in order to proceed normally?

A.
Allow

B.
Try

C.
Never

D.
Demand