[Thorpuse]

That's how it works. Partially Automatic Client Auth uses the services supported by user Auth (telnet, ftp, http, rlogin) for the initial client auth login - once you've authenticated using those services, then the Client Auth process works for all services.