Add the following to options:

    ca: fs.readFileSync('./certs/lamassu.pem'),
    secureProtocol: 'TLSv1_method',
    requestCert: true,
    rejectUnauthorized: true,
    ciphers: 'AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH',
    honorCipherOrder: true

where lamassu.pem is our factory certificate. This certificate helps ensure that the machine came from us.