yes, I decided to support just encryption, not authenticity since there is usually self-signed cert, it's something to improve if Signo is used widely, we'd have to solve where store CA cert etc