How to enable X.509 for principal propagation between BTP and on-prem

Hi,

I'm following this guide, but x.509 is unable for my cloud connector. Only option is Kerberos.

Anyone knows why? I'm not a basis guy ;)