Well, the setting doesn't have much effect if not at the host level.

That said, you may put SSLVerifyClient optional at the host level, then at the locations you do want to check the client certificate put `

Require ssl-verify-client

`