closer to working properly.
use tls-auth key in client mode
defined key names, improve client template