Looking for documentation or example for EdgeGareway linux client, and APM two factor authentication with a client certificate

I'm using the EdgeGateway linux cli client.

The client seems to only support username password, and certificate, which seems to leave out an OTP password prompt or other 2nd factor, except for the possibility of a certificate.

Does anyone have an example of requiring a certificate with a linux client?

Thanks!