Hello Rob, We use SSL Client Certificates extensively here at MIT. They are quite convenient for developers: if you want to plug into the existing campus wide authentication system, just ask for a client cert and you don't need to reimplement any authentication system.
Cheers, Edward