Client credential that resolves certificates dynamically at runtime via a provider delegate. Used when certificates need to be rotated or selected based on runtime conditions.