Yeah, I think @zash was sighing loudly wherever he was over how silly I was to miss the fact that there were separate settings in # for encryption and cert-validation/auth. ;)