Client Certificate Authentication w/ iRule

We have some 8400 w/ 9.4.7 that we would like to start using Client Certificate Authentication (CCA) with some granularity control. I opened a case with F5 support and suggested I check with the Dev folks to see if there is such a solution. We would like to use CCA for a customer and would like to accomplish 2 things with this solution. Firstly, we would like to enable CCA and use it only when accessing a specific service only ie: https://www.abc123.com/ClaimService/ClaimService.asmx. Secondly, all other requests should default to normal HTTPS one-way certificate authentication. I can't seem to find any docs related to what we're trying to accomplish, I'm not sure where to begin, or if this is even possible but I figure there might be a CCA/iRule combo that may work. Any help is appreciated. Thx all!