Test that client errors out when daemon cert isn't recognized against the client ca certs?  The "fail safe if daemon cert isn't recognized" case.