`session.getPeerPrincipal` and `session.getPeerCertificates` -- see comment above for full details.