store cert/key in DER format for server...client does not verify server
store original destination ip in protobuf